PT-2026-51179 · Gnu · Savane

Published 2026-06-20 · Updated 2026-06-20 · CVE-2026-56355

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions GNU Savannah Administration Savane versions prior to 3.18

Description GNU Savannah Administration Savane uses untrusted data as part of the authorization process, which can lead to improper authorization.

Recommendations Update to a version later than 3.17.

Fix

Weakness Enumeration

CWE-696

Related Identifiers

CVE-2026-56355

Affected Products

Savane

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-56355 · Security Note
• https://news.ycombinator.com/item?id=48605220 · Note
• https://hacktron.ai · Note
• https://cgit.git.savannah.gnu.org/cgit/administration/savane.git/tree/frontend/php/file.php?h=release-3.17#n123 · Note
• https://twitter.com/CVEnew/status/2068466524470341832 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2068459839987081583 · Twitter Post
• https://cgit.git.savannah.gnu.org/cgit/administration/savane.git/tree/frontend/php/file.php?h=release-3.17#n113 · Note
• https://fsf.org/news/statement-regarding-gnu-savannah-security-reports · Note
• https://mallory.ai/stories/019ee445-bdd4-7775-93b5-a8faaf5c2eb7 · Note