VulnSocial

CVE-2026-82248Disclosure

LOWCVSS 6.0 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

gix-worktree-state before 0.33.0 (part of gitoxide) allows writing files outside the worktree on Windows. gix_worktree_state::checkout() follows an existing terminal symlink during non-exclusive (incremental) materialization (destination_is_initially_empty: false) when core.symlinks is true. If a symlink entry (mode 120000) is first checked out at a path P pointing outside the worktree, a subsequent incremental checkout of a regular-file entry (mode 100644) at the same path follows the existing reparse point and writes the blob content through the link, overwriting files outside the worktree.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-59

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-09: 1Technical Details · 2026-09-09: 109-09
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • DailyCVE@dailycve
    Disclosure

    🟠 #Windows gix-sec, Privilege Escalation via Improper Trust Check, #CVE-2026-82248 (Medium) -DC-Sep2026-2287 https://dailycve.com/windows-gix-sec-privilege-escalation-via-improper-trust-check-cve-2026-82248-medium-dc-sep2026-2287/

    Post summary

    The post announces a Medium severity privilege escalation flaw (CVE‑2026‑82248) in Windows gix‑sec via an improper trust check, with no PoC, exploit, patch, or evidence of active exploitation provided.

    0000040
    237 followersView on X

Explore more

Back to dashboard