Medium severity · published Aug 6, 2026
CVE-2026-64653
GitHub CLI: Unescaped variable components in request URLs could allow path traversal
5.1
CVSS
0.5%
EPSS
No
On KEV
Description
GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resource than the user intended. This issue is fixed in version 2.97.0.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
cli · cli
< 2.97.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-64653
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-64653
github.com
https://github.com/cli/cli/commit/0c2eea6338a2323cfff000160b9b5a56a38d2a06
github.com
https://github.com/cli/cli/releases/tag/v2.97.0
github.com
https://github.com/cli/cli/security/advisories/GHSA-4fjg-2h4q-fwg3
More from cli
9.6
CVE-2024-52308
Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer
9.1
CVE-2026-48501
GitHub CLI tokens leak via `gh attestation` commands
6.5
CVE-2024-53858
Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli
6.3
CVE-2025-25204
`gh attestation verify` returns incorrect exit code during verification if no attestations are present
6.3
CVE-2024-54132
GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability