Dashboard / CVE-2026-5845

CVE-2026-5845

HIGH
MEDIUM Priority: 0.02 BB Relevance: 39/100
Published: 2026-04-21 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: X
AT: Present
VC: High
VI: High
VA: None

Description

An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to access private repositories outside the intended installation scope, which can include write operations, via an authorization fallback that treated a revoked/deleted installation as a global installation context, which could be chained with token revocation timing and SSH push attribution to obtain and reuse a victim-scoped token. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.21 and was fixed in versions 3.20.1, 3.19.5, 3.18.8, 3.17.14, 3.16.17, 3.15.21, and 3.14.26. This vulnerability was reported via the GitHub Bug Bounty program.

Weakness Classification (1)

Affected Software (7)

VendorProductVersion
github enterprise_server < 3.14.26
github enterprise_server 3.15.0 – 3.15.21
github enterprise_server 3.16.0 – 3.16.17
github enterprise_server 3.17.0 – 3.17.14
github enterprise_server 3.18.0 – 3.18.8
github enterprise_server 3.19.0 – 3.19.5
github enterprise_server 3.20.0

References & Advisories (7)

Bug Bounty Relevance

39 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.2 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.29%
Raw Score 0.002900
Percentile 21.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00290
2026-10-28
0.00290

Intelligence Sources

nvd ref →

External Links