CVE-2026-64654

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-64654", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-07-20T17:11:30.896Z", "datePublished": "2026-08-06T18:27:38.491Z", "dateUpdated": "2026-08-07T17:09:40.307Z"}, "containers": {"cna": {"title": "GitHub CLI: Terminal escape sequence injection in multiple `gh` commands", "problemTypes": [{"descriptions": [{"cweId": "CWE-150", "lang": "en", "description": "CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/cli/cli/security/advisories/GHSA-3m3g-3wcr-px46", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/cli/cli/security/advisories/GHSA-3m3g-3wcr-px46"}, {"name": "https://github.com/cli/cli/commit/2a1409fe88d416cc85fc96fb5bc473f83ed5a054", "tags": ["x_refsource_MISC"], "url": "https://github.com/cli/cli/commit/2a1409fe88d416cc85fc96fb5bc473f83ed5a054"}, {"name": "https://github.com/cli/cli/releases/tag/v2.97.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/cli/cli/releases/tag/v2.97.0"}], "affected": [{"vendor": "cli", "product": "cli", "versions": [{"version": "< 2.97.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-06T18:27:38.491Z"}, "descriptions": [{"lang": "en", "value": "GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that content can embed escape sequences that are interpreted by the terminal of a user who runs an affected command, with impact ranging from cosmetic manipulation of the title or on-screen content to, on some terminal emulators, command execution. This extends the same class of issue as CVE-2026-45803\u2014which addressed only gh run view --log\u2014to the other affected command paths. This issue is fixed in version 2.97.0."}], "source": {"advisory": "GHSA-3m3g-3wcr-px46", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-07T15:29:09.364722Z", "id": "CVE-2026-64654", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-07T17:09:40.307Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-64654", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-07T15:29:09.364722Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-07T15:29:33.891Z"}}], "cna": {"title": "GitHub CLI: Terminal escape sequence injection in multiple `gh` commands", "source": {"advisory": "GHSA-3m3g-3wcr-px46", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "NONE"}}], "affected": [{"vendor": "cli", "product": "cli", "versions": [{"status": "affected", "version": "< 2.97.0"}]}], "references": [{"url": "https://github.com/cli/cli/security/advisories/GHSA-3m3g-3wcr-px46", "name": "https://github.com/cli/cli/security/advisories/GHSA-3m3g-3wcr-px46", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/cli/cli/commit/2a1409fe88d416cc85fc96fb5bc473f83ed5a054", "name": "https://github.com/cli/cli/commit/2a1409fe88d416cc85fc96fb5bc473f83ed5a054", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/cli/cli/releases/tag/v2.97.0", "name": "https://github.com/cli/cli/releases/tag/v2.97.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that content can embed escape sequences that are interpreted by the terminal of a user who runs an affected command, with impact ranging from cosmetic manipulation of the title or on-screen content to, on some terminal emulators, command execution. This extends the same class of issue as CVE-2026-45803\u2014which addressed only gh run view --log\u2014to the other affected command paths. This issue is fixed in version 2.97.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-150", "description": "CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-06T18:27:38.491Z"}}}, "cveMetadata": {"cveId": "CVE-2026-64654", "state": "PUBLISHED", "dateUpdated": "2026-08-07T17:09:40.307Z", "dateReserved": "2026-07-20T17:11:30.896Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-08-06T18:27:38.491Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "cli", "vendor": "cli", "versions": [{"status": "affected", "version": "< 2.97.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that content can embed escape sequences that are interpreted by the terminal of a user who runs an affected command, with impact ranging from cosmetic manipulation of the title or on-screen content to, on some terminal emulators, command execution. This extends the same class of issue as CVE-2026-45803\u2014which addressed only gh run view --log\u2014to the other affected command paths. This issue is fixed in version 2.97.0."}], "id": "CVE-2026-64654", "lastModified": "2026-09-10T20:36:14.340", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-64654", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-07T15:29:09.364722Z", "version": "2.0.3"}}]}, "published": "2026-08-06T22:18:13.380", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/cli/cli/commit/2a1409fe88d416cc85fc96fb5bc473f83ed5a054"}, {"source": "security-advisories@github.com", "url": "https://github.com/cli/cli/releases/tag/v2.97.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/cli/cli/security/advisories/GHSA-3m3g-3wcr-px46"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-150"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "github.com/cli/cli: GitHub CLI: Terminal escape sequence injection allows command execution", "id": "2512206", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512206"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.7", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-78", "details": ["GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, multiple GitHub CLI commands printed externally controlled gist, API, pull request, release, codespace, skill, or agent-task content without neutralizing terminal escape sequences. An attacker who can influence that content can embed escape sequences that are interpreted by the terminal of a user who runs an affected command, with impact ranging from cosmetic manipulation of the title or on-screen content to, on some terminal emulators, command execution. This extends the same class of issue as CVE-2026-45803\u2014which addressed only gh run view --log\u2014to the other affected command paths. This issue is fixed in version 2.97.0.", "A flaw was found in GitHub CLI (gh). Multiple commands within the tool fail to neutralize terminal escape sequences when displaying externally controlled content. An attacker who can influence this content can embed malicious escape sequences. These sequences are then interpreted by a user's terminal, potentially leading to cosmetic manipulation of the display or, in some terminal emulators, arbitrary command execution."], "mitigation": {"lang": "en:us", "value": "- Upgrade `gh` to version 2.97.0 or later.\n- Be cautious when running `gh` commands against untrusted repositories. Use a terminal emulator that does not execute escape sequences automatically."}, "name": "CVE-2026-64654", "package_state": [{"cpe": "cpe:/a:redhat:openshift_gitops:1", "fix_state": "Not affected", "package_name": "openshift-gitops-1/argocd-rhel8", "product_name": "Red Hat OpenShift GitOps"}, {"cpe": "cpe:/a:redhat:openshift_gitops:1", "fix_state": "Not affected", "package_name": "openshift-gitops-1/argocd-rhel9", "product_name": "Red Hat OpenShift GitOps"}, {"cpe": "cpe:/a:redhat:openstack:18.0", "fix_state": "Not affected", "package_name": "rhoso-operators/openstack-operator-bundle", "product_name": "Red Hat OpenStack Platform 18.0"}], "public_date": "2026-08-06T18:27:38Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-64654\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-64654\nhttps://github.com/cli/cli/commit/2a1409fe88d416cc85fc96fb5bc473f83ed5a054\nhttps://github.com/cli/cli/releases/tag/v2.97.0\nhttps://github.com/cli/cli/security/advisories/GHSA-3m3g-3wcr-px46"], "statement": "A flaw was found in GitHub CLI (gh). Terminal escape sequences in responses from GitHub API endpoints are not sanitized before display, allowing an attacker who controls repository metadata (e.g. issue titles, PR descriptions) to inject terminal escape sequences that may execute arbitrary commands when a user runs gh commands in a vulnerable terminal emulator. Red Hat products that include github.com/cli/cli as a transitive Go dependency (OpenShift GitOps, OpenStack Platform) are not affected because the gh CLI is not invoked and terminal output is not rendered.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.97.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "cli", "source": "cna", "vendor": "cli"}, "product": "cli", "vendor": "cli"}], "created": "2026-08-07T01:15:05.054680+00:00", "updated": "2026-08-11T02:45:06.178235+00:00", "vendors": ["cli", "cli$PRODUCT$cli"]}