CVE-2026-114094

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-114094
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114094.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-114094
Aliases
Published
2026-10-21T00:36:58Z
Modified
2026-10-21T10:45:31Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths
Details

Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named 'C:' that bypasses NTFS validation and writes files outside the worktree to achieve remote code execution.

Database specific 
{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-22"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114094.json"
}
References

Affected packages

Git / github.com/jelmer/dulwich

Affected ranges

Type
GIT
Repo
https://github.com/jelmer/dulwich
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c93ab9ba019c7691d170253f557252030a6e0981
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "1.2.9"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        }
    ]
}

Affected versions

dulwich-0.*
dulwich-0.1.0
dulwich-0.1.1
dulwich-0.10.0
dulwich-0.10.1
dulwich-0.11.0
dulwich-0.11.1
dulwich-0.12.0
dulwich-0.13.0
dulwich-0.14.0
dulwich-0.14.1
dulwich-0.15.0
dulwich-0.16.0
dulwich-0.16.1
dulwich-0.16.2
dulwich-0.16.3
dulwich-0.17.0
dulwich-0.17.1
dulwich-0.17.2
dulwich-0.17.3
dulwich-0.18.0
dulwich-0.18.1
dulwich-0.18.2
dulwich-0.18.3
dulwich-0.18.4
dulwich-0.18.5
dulwich-0.18.6
dulwich-0.19.0
dulwich-0.19.1
dulwich-0.19.10
dulwich-0.19.11
dulwich-0.19.12
dulwich-0.19.13
dulwich-0.19.14
dulwich-0.19.15
dulwich-0.19.16
dulwich-0.19.2
dulwich-0.19.2-1
dulwich-0.19.2-2
dulwich-0.19.3
dulwich-0.19.4
dulwich-0.19.5
dulwich-0.19.6
dulwich-0.19.7
dulwich-0.19.8
dulwich-0.19.9
dulwich-0.2.0
dulwich-0.2.1
dulwich-0.20.0
dulwich-0.20.1
dulwich-0.20.11
dulwich-0.20.12
dulwich-0.20.13
dulwich-0.20.14
dulwich-0.20.15
dulwich-0.20.17
dulwich-0.20.18
dulwich-0.20.19
dulwich-0.20.2
dulwich-0.20.20
dulwich-0.20.21
dulwich-0.20.22
dulwich-0.20.23
dulwich-0.20.24
dulwich-0.20.25
dulwich-0.20.26
dulwich-0.20.27
dulwich-0.20.28
dulwich-0.20.29
dulwich-0.20.3
dulwich-0.20.30
dulwich-0.20.32
dulwich-0.20.33
dulwich-0.20.34
dulwich-0.20.35
dulwich-0.20.36
dulwich-0.20.37
dulwich-0.20.38
dulwich-0.20.39
dulwich-0.20.4
dulwich-0.20.40
dulwich-0.20.41
dulwich-0.20.42
dulwich-0.20.43
dulwich-0.20.44
dulwich-0.20.5
dulwich-0.20.50
dulwich-0.20.6
dulwich-0.20.7
dulwich-0.20.8
dulwich-0.20.9
dulwich-0.21.0
dulwich-0.21.1
dulwich-0.21.2
dulwich-0.21.3
dulwich-0.21.4.1
dulwich-0.21.5
dulwich-0.21.6
dulwich-0.21.7
dulwich-0.22.0
dulwich-0.22.1
dulwich-0.22.2
dulwich-0.22.3
dulwich-0.22.4
dulwich-0.22.5
dulwich-0.22.6
dulwich-0.22.7
dulwich-0.22.8
dulwich-0.23.1
dulwich-0.23.2
dulwich-0.24.0
dulwich-0.24.1
dulwich-0.24.2
dulwich-0.24.5
dulwich-0.24.6
dulwich-0.24.7
dulwich-0.24.8
dulwich-0.25.0
dulwich-0.25.1
dulwich-0.25.2
dulwich-0.3.0
dulwich-0.3.1
dulwich-0.3.2
dulwich-0.3.3
dulwich-0.4.0
dulwich-0.4.1
dulwich-0.5.0
dulwich-0.6.0
dulwich-0.6.1
dulwich-0.6.2
dulwich-0.7.0
dulwich-0.7.1
dulwich-0.8.0
dulwich-0.8.1
dulwich-0.8.2
dulwich-0.8.3
dulwich-0.8.4
dulwich-0.8.5
dulwich-0.8.6
dulwich-0.8.7
dulwich-0.9.0
dulwich-0.9.1
dulwich-0.9.2
dulwich-0.9.3
dulwich-0.9.4
dulwich-0.9.5
dulwich-0.9.6
dulwich-0.9.7
dulwich-0.9.8
dulwich-1.*
dulwich-1.0.0
dulwich-1.1.0
dulwich-1.2.0
dulwich-1.2.1
dulwich-1.2.2
dulwich-1.2.3
dulwich-1.2.4
dulwich-1.2.5
dulwich-1.2.6
dulwich-1.2.7
dulwich-1.2.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114094.json"