CVE WATCH / VULNERABILITY DETAIL
CVE-2026-123532
MEDIUMCVSS 6.5NVD feed
Published 8 November 2026 · tracked since 8 November 2026
Description
gix-fs in gitoxide before 0.24.1 contains a credential disclosure vulnerability that allows remote attackers to capture NTLM credentials by supplying UNC symlink targets in a crafted repository. When a victim checks out the repository on Windows with symlinks enabled, gix_fs::symlink::create calls i
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog