Git flaw runs attacker code when cloning repos with submodules

published 2026-11-10

A malicious repository can run the attacker's code on your machine when you clone it recursively together with its submodules. The flaw is an integer truncation in how Git handles its index, tracked as CVE-2026-111760.

Fixed in: 2.56.1

CVE: CVE-2026-111760

Source: @TheHackersNews on X

Am I affected?

You are affected if the installed version is older than 2.56.1. Check the version you have and update to 2.56.1 or later. The fixed version is verified against a vendor or advisory source.

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 2404 and your operating system.