CVE-2026-96890

8.8 HIGHpublic exploit available

Published 2026-10-06 · Updated 2026-10-09

AI risk analysis

Summary: A Server-Side Request Forgery (SSRF) vulnerability in GitHub Enterprise Server allows authenticated repository contributors to make the server issue requests to internal hosts, potentially leading to remote code execution. This affects GCP service account credential validation and requires specific configuration with Advanced Security enabled.
Exploitability: Exploitation requires an authenticated user with push permissions on a repository with secret scanning enabled, making it moderately difficult but achievable in configured environments.
Blast radius: If exploited, this vulnerability could allow attackers to execute arbitrary code on the GitHub Enterprise Server appliance, potentially compromising all repositories and data hosted on that instance.
Detection: Monitor for unusual outbound HTTP requests from the GitHub Enterprise Server appliance to internal IP addresses or domains, particularly during secret scanning validation processes.
Prioritized remediation: Upgrade to GitHub Enterprise Server versions 3.20.9, 3.21.7, or 3.22.2 to remediate this SSRF vulnerability.

ssrfgithubenterprisegcpsecret-scanning

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code execution on the appliance. The secret scanning validator for GCP service account credentials trusted the token endpoint embedded in a committed credential and issued a request to it without restricting the destination. Exploitation required an authenticated user with permission to push to a repository on an instance with GitHub Advanced Security and secret scanning validity checks enabled, a non-default configuration. This vulnerability affected GitHub Enterprise Server 3.20, 3.21, and 3.22 and was fixed in versions 3.20.9, 3.21.7, and 3.22.2. This vulnerability was reported through the GitHub Bug Bounty program.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-918

Vendors

github

Products

enterprise server

Public exploit & PoC references

https://docs.github.com/en/[email protected]/admin/release-notes#3.20.9[Release Notes, Vendor Advisory]
https://docs.github.com/en/[email protected]/admin/release-notes#3.21.7[Release Notes, Vendor Advisory]
https://docs.github.com/en/[email protected]/admin/release-notes#3.22.2[Release Notes, Vendor Advisory]

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.