CVE-2026-72924

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-72924
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72924.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72924
Aliases
  • GHSA-vfhh-p7hm-pxfh
Downstream
Published
2026-08-25T21:03:11.560Z
Modified
2026-08-28T11:30:15.779868636Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default
Details

GitHub CLI (gh) is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the user's non-loopback local IP addresses by other hosts that can route to the user's machine. This behavior does not change the GitHub-side visibility of the Codespaces port. Instead, it exposes the forwarded service through a wildcard-bound listener on the user's local machine, even when the source Codespaces port remains private. Exploitation requires a network-adjacent attacker to reach the victim's machine while forwarding is active. This issue is fixed in version 2.98.0.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72924.json",
    "cwe_ids": [
        "CWE-1327",
        "CWE-668"
    ],
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/cli/cli

Affected ranges

Type
GIT
Repo
https://github.com/cli/cli
Events
Introduced
32faa8e5fa7b36019baf273124ff7d54d8c201f6
Fixed
a255baf71d13fe5947a4eb7ad521ffd412d64cee
Database specific
Show details 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "2.28.0"
        },
        {
            "fixed": "2.98.0"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72924.json"