PT-2026-24396 · Unknown · Simple-Git

Steveukx · Publicado 2026-03-10 · Atualizado 2026-05-18 · CVE-2026-28292

Positive Technologies (AI Summary) · Pt

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas simple-git versões 3.15.0 a 3.32.2

Descrição O software simple-git, uma interface Node.js para executar comandos git, contém um problema no qual atacantes podem contornar correções anteriores. Este contorno ocorre devido à análise de configuração insensível a maiúsculas e minúsculas, o que leva a uma falha de sanitização. Isso possibilita a execução remota de código.

Recomendações Atualize para a versão 3.23.0.

Exploit

Correção

RCE

OS Command Injection

Enumeração de Fraquezas

CWE-178

CWE-78

Identificadores relacionados

CLEANSTART-2026-CE10526

CLEANSTART-2026-DV49099

CLEANSTART-2026-GS57401

CLEANSTART-2026-NB51079

CLEANSTART-2026-OW14933

CLEANSTART-2026-SW34937

CVE-2026-28292

GHSA-R275-FR43-PM7Q

OPENSUSE-SU-2026:10327-1

Produtos afetados

Simple-Git

Referências · 168

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/28xxx/CVE-2026-28292.json · Exploit
• 🔥 https://codeant.ai/security-research/simple-git-remote-code-execution-cve-2026-28292 · Exploit
• 🔥 https://codeant.ai/security-research/security-research-simple-git-remote-code-execution-cve-2026-28292 · Exploit
• https://github.com/steveukx/git-js · Nota
• https://github.com/steveukx/git-js/security/advisories/GHSA-r275-fr43-pm7q · Nota
• https://github.com/steveukx/git-js/commit/f7042088aa2dac59e3c49a84d7a2f4b26048a257 · Correção
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GS57401.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-CE10526.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-OW14933.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NB51079.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SW34937.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-DV49099.json · Nota
• https://osv.dev/vulnerability/CVE-2026-31802 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-1528 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-25896 · Nota de Segurança