Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-104026

In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Meta

Description

In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/annotate.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Meta Platforms, Inc Sapling SCM

Default version status: unaffected

  • v0.0.0 to < v0.2.20260929-102736affected

References