Security Advisory

CVE-2026-4660

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-09 13:47:46

Last updated 2026-07-15 00:50:08

Assigner HashiCorp

CVSS score 7.5

State PUBLISHED

Description

HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixed in go-getter v1.8.6. This vulnerability does not affect the go-getter/v2 branch and package.

← Browse all CVEs View on cve.org ↗