{"affected":[{"defaultStatus":"unknown","product":"Git","source":"CNA: GitLab","vendor":"Git","versions":[{"status":"affected","version":"2.50.1"},{"status":"affected","version":"2.51.2"},{"status":"affected","version":"2.52.0"},{"status":"affected","version":"2.53.0"},{"status":"affected","version":"2.54.0"},{"status":"affected","version":"2.55.0"},{"status":"affected","version":"2.56.0"}]}],"cveId":"CVE-2026-114466","cwes":["CWE-1220"],"description":"Arbitrary data can be read or written through git-fast-import(1) and git-fast-export(1) features not marked unsafe","epss":null,"exploits":[],"kev":null,"metrics":[{"score":4.4,"severity":"medium","source":"CNA: GitLab","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","version":"3.1"}],"modifiedAt":1794489180071,"publishedAt":1794489180071,"references":[{"source":"CNA: GitLab","tags":[],"url":"https://gitlab.com/gitlab-org/git/-/work_items/812"}],"remediation":[{"kind":"fix","source":"CNA: GitLab","text":"Upgrade to versions 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1, 2.55.1, 2.56.1 or above."}],"revision":"f64dde11e5c6cba88f83434d70c0292d41b3973ba16e4c3e1ae85b9c00d73cac","sources":[{"modifiedAt":1794489180071,"name":"CNA: GitLab","retrievedAt":1794492522420,"url":"https://www.cve.org/CVERecord?id=CVE-2026-114466"}],"ssvc":null,"status":"published","title":"Insufficient Granularity of Access Control in Git","updatedAt":1794492522420}