The Hacker News

Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push

CVE-2026-3854 (CVSS 8.7) enabled GitHub RCE via git push, risking cross-tenant access to millions of repositories.
Cybernews

One git push from disaster: this fundamental GitHub flaw could’ve compromised the world’s code

A critical remote code execution flaw in GitHub allowed users to gain access to millions of repositories and compromise ...