Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to access private repositories outside the intended installation scope, which can include write operations, via an authorization fallback that treated a revoked/deleted installation as a global installation context, which could be chained with token revocation timing and SSH push attribution to obtain and reuse a victim-scoped token. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.21 and was fixed in versions 3.20.1, 3.19.5, 3.18.8, 3.17.14, 3.16.17, 3.15.21, and 3.14.26. This vulnerability was reported via the GitHub Bug Bounty program.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-22 | 1 | Disclosure1 |
| 2026-04-25 | 2 | Disclosure2 |
| 2026-04-27 | 1 | General1 |
CVE-2026-5845 Improper Authorization in GitHub Enterprise Server Scoped Token Authorization Below 3.21 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5845
Post summary
The entry briefly describes an authorization flaw in GitHub Enterprise Server affecting versions under 3.21, with no PoC, exploit, or patch details shared.
CVE-2026-5845: GitHub Enterprise Server Authorization Bypass - What It Means for Your Business and How to Respond https://hubs.li/Q04dyfSS0
Post summary
The provided text is a headline and link to a report about CVE-2026-5845, without indicating PoC, exploit, active exploitation, patch, technical details, or false‑positive assertions.
🚨*CVE* CVE-2026-5845 An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to access priva… https://www.cve.org/CVERecord?id=CVE-2026-5845 ----- Traducción: CVE-2026-5845 Una… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑5845 as an improper authorization flaw in GitHub Enterprise Server’s scoped user‑to‑server token system, providing limited technical detail but no exploitation or mitigation information.
CVE-2026-5845 An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to access priva… https://www.cve.org/CVERecord?id=CVE-2026-5845
Post summary
The text announces CVE‑2026‑5845, an improper authorization flaw in GitHub Enterprise Server’s scoped user‑to‑server token system.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | github | enterprise_server | - | - | - |
| App | github | enterprise_server | 3.20.0 | - | - |