Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2026-11968

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') in TortoiseGit

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitLab

Description

Argument Injection in TortoiseGitBlame via Malicious Git History Filenames Leads to Arbitrary File Write in TortoiseGit

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TortoiseGit team TortoiseGit

Default version status: unaffected

  • 1.8.10.0 to < 2.19.0affected

References