{"id":"CVE-2026-64652","revision":null,"records":[{"revision":"ce72326045f24bce8e26e6c3f73ce639","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-64652","aliases":[],"title":"GitHub CLI: Partial token disclosure in `gh auth status` output","description":"GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output that is captured or shared. Authenticated users are affected if they ran gh auth status (without the --show-token flag) with a token type whose format contains an underscore after the prefix. This includes fine-grained personal access tokens (github_pat_*) and GitHub App installation and user access tokens (ghs_*, ghu_*; for example, ghs_<APPID>_<JWT>), as well as the Actions GITHUB_TOKEN. Classic tokens such as gho_* and ghp_* have an underscore-free body and are not affected. This issue is fixed in version 2.97.0.","state":0,"publishedAt":"2026-08-06T17:45:35.729+00:00","modifiedAt":"2026-08-07T17:45:03.284+00:00","affected":[{"ecosystem":"Vendor product","name":"cli","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"cli\",\n                    \"product\": \"cli\",\n                    \"versions\": [\n                        {\n                            \"version\": \"< 2.97.0\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":3.3,"severity":"LOW"}],"references":["https://github.com/cli/cli/security/advisories/GHSA-cg6r-mpgc-h9mm","https://github.com/cli/cli/commit/3f6a16a9f8c7fe9676aa8d8f47b399310dd231c3","https://github.com/cli/cli/releases/tag/v2.97.0"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-64652","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-64652","identifiers":["CVE-2026-64652"]},"retained":false,"historicalAffected":[]},{"revision":"d225cae5079948bfba151f7e60269f57","observedAt":"2026-11-07T13:31:05.481+00:00","statement":{"source":"euvd","id":"EUVD-2026-54212","aliases":["CVE-2026-64652","GHSA-cg6r-mpgc-h9mm"],"title":"GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of …","description":"GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output that is captured or shared. Authenticated users are affected if they ran gh auth status (without the --show-token flag) with a token type whose format contains an underscore after the prefix. This includes fine-grained personal access tokens (github_pat_*) and GitHub App installation and user access tokens (ghs_*, ghu_*; for example, ghs_<APPID>_<JWT>), as well as the Actions GITHUB_TOKEN. Classic tokens such as gho_* and ghp_* have an underscore-free body and are not affected. This issue is fixed in version 2.97.0.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":3.3,"severity":null}],"references":["https://github.com/cli/cli/security/advisories/GHSA-cg6r-mpgc-h9mm","https://github.com/cli/cli/commit/3f6a16a9f8c7fe9676aa8d8f47b399310dd231c3","https://github.com/cli/cli/releases/tag/v2.97.0"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-54212","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Aug 6, 2026, 5:45:35 PM","dateUpdated":"Aug 7, 2026, 5:45:03 PM"},"relatedAdvisories":[{"id":"openSUSE-SU-2026:21663-1","title":"Security update for gh","vulnerabilityIds":["CVE-2026-39821","CVE-2026-64652","CVE-2026-64653","CVE-2026-64654","CVE-2026-64655"]},{"id":"openSUSE-SU-2026:11530-1","title":"gh-2.97.0-1.1 on GA media","vulnerabilityIds":["CVE-2026-64652","CVE-2026-64653","CVE-2026-64654","CVE-2026-64655"]},{"id":"msrc_CVE-2026-64652","title":"GitHub CLI: Partial token disclosure in `gh auth status` output","vulnerabilityIds":["CVE-2026-64652"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-54212","identifiers":["EUVD-2026-54212","CVE-2026-64652","GHSA-cg6r-mpgc-h9mm"]},"retained":false,"historicalAffected":[]},{"revision":"677d9223187e48ea9fe330a00e41b110","observedAt":"2026-10-25T15:18:45.851+00:00","statement":{"source":"nvd","id":"CVE-2026-64652","aliases":[],"title":"GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of …","description":"GitHub CLI (gh) is GitHub's official command line tool. Prior to version 2.97.0, gh auth status masked only the characters after the last underscore in certain fine-grained personal access tokens and GitHub App tokens. As a result, part of an affected token could appear in terminal or CI output that is captured or shared. Authenticated users are affected if they ran gh auth status (without the --show-token flag) with a token type whose format contains an underscore after the prefix. This includes fine-grained personal access tokens (github_pat_*) and GitHub App installation and user access tokens (ghs_*, ghu_*; for example, ghs_<APPID>_<JWT>), as well as the Actions GITHUB_TOKEN. Classic tokens such as gho_* and ghp_* have an underscore-free body and are not affected. This issue is fixed in version 2.97.0.","state":0,"publishedAt":"2026-08-06T22:18:13.087+00:00","modifiedAt":"2026-09-10T20:36:14.34+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · security-advisories@github.com · Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":3.3,"severity":"LOW"}],"references":["https://github.com/cli/cli/commit/3f6a16a9f8c7fe9676aa8d8f47b399310dd231c3","https://github.com/cli/cli/releases/tag/v2.97.0","https://github.com/cli/cli/security/advisories/GHSA-cg6r-mpgc-h9mm"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-64652","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Awaiting Analysis","weaknesses":["CWE-201"],"productCriteria":[],"sourceDates":{"published":"2026-08-06T22:18:13.087","lastModified":"2026-09-10T20:36:14.340"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2026-64652","identifiers":["CVE-2026-64652"]},"retained":false,"historicalAffected":[]},{"revision":"3cf9ea5e8db74208930074ba8b09b306","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-cg6r-mpgc-h9mm","aliases":["CVE-2026-64652","GO-2026-6766"],"title":"GitHub CLI partially discloses authentication tokens in `gh auth status` output","description":"### Summary\n\nA security vulnerability has been identified in GitHub CLI where `gh auth status` could potentially print a portion of the authentication token in plaintext, depending on the lexical structure of the token.\n\nAffected users:\n- Authenticated users who ran `gh auth status` (without the `--show-token` flag) with a token type whose format contains an underscore after the prefix. This includes fine-grained personal access tokens (`github_pat_*`) and GitHub App installation/user access tokens (`ghs_*`, `ghu_*`, e.g., `ghs_<APPID>_<JWT>`), including the Actions `GITHUB_TOKEN`. Classic tokens such as `gho_*` and `ghp_*` have an underscore-free body and are not affected.\n\n### Details\n\nThe vulnerability stems from the way GitHub CLI masks the authentication token when reporting authentication state:\n\n1. A user runs `gh auth status` without `--show-token`, expecting the token to be fully masked.\n2. The masking logic redacts only the characters that follow the last underscore in the token, instead of redacting everything after the token prefix.\n3. The partially masked token is written to the command output, where it can be captured or shared.\n\nBecause `gh auth status` is a diagnostic command commonly run interactively and inside automated environments, the leaked token characters can end up in CI/CD job logs, terminal scrollback, screen recordings, screenshots, or pasted output shared in bug reports and support requests.\n\nIn `v2.97.0`, GitHub CLI fully masks the token in `gh auth status` output, preserving only the known token prefix and redacting the remainder unless `--show-token` is explicitly provided.\n\n### Impact\n\nRunning `gh auth status` in a context where the output is captured, logged, or shared could leak a portion of an affected token. The affected token types are fine-grained personal access tokens (`github_pat_*`) and GitHub App installation/user access tokens (`ghs_*`, `ghu_*`, e.g., `ghs_<APPID>_<JWT>`), including the Actions `GITHUB_TOKEN`. Installation and Actions tokens are short-lived, which narrows the window in which a recovered token could be reused. See [GitHub credential types](https://docs.github.com/en/organizations/managing-programmatic-access-to-your-organization/github-credential-types#credential-types-overview).\n\n### Remediation and Mitigation\n\n1. Upgrade `gh` to `v2.97.0`.\n2. Rotate any affected token whose masked `gh auth status` output may have been captured or shared:\n   - **Fine-grained personal access tokens (`github_pat_*`):** regenerate the token from your account settings. See [Managing your personal access tokens](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens).\n   - **GitHub App installation/user access tokens (`ghs_*`, `ghu_*`, e.g., `ghs_<APPID>_<JWT>`):** these are short-lived and rotate automatically (See [GitHub credential types](https://docs.github.com/en/organizations/managing-programmatic-access-to-your-organization/github-credential-types#credential-types-overview)). If you believe a token was captured while still valid, you can revoke it immediately using the [Revoke an installation access token](https://docs.github.com/en/rest/apps/installations#revoke-an-installation-access-token) REST endpoint (`DELETE /installation/token`). To cut off a third-party app's access more broadly, suspend or uninstall the app from the web UI. See [Reviewing and modifying installed GitHub Apps](https://docs.github.com/en/apps/using-github-apps/reviewing-and-modifying-installed-github-apps).\n   - **Actions `GITHUB_TOKEN`:** this token is automatically invalidated when the job finishes, so no manual revocation is normally required. See [GitHub credential types](https://docs.github.com/en/organizations/managing-programmatic-access-to-your-organization/github-credential-types#credential-types-overview).\n3. Until you can upgrade, avoid running `gh auth status` in contexts where the output is captured or shared, and manually redact the token line before sharing any output.","state":0,"publishedAt":"2026-10-15T18:05:19+00:00","modifiedAt":"2026-10-19T21:41:21.4493882+00:00","affected":[{"ecosystem":"Go","name":"github.com/cli/cli/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"2.97.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"LOW"}],"references":["https://github.com/cli/cli/security/advisories/GHSA-cg6r-mpgc-h9mm","https://nvd.nist.gov/vuln/detail/CVE-2026-64652","https://github.com/cli/cli/commit/3f6a16a9f8c7fe9676aa8d8f47b399310dd231c3","https://github.com/cli/cli","https://github.com/cli/cli/releases/tag/v2.97.0"],"sourceUrl":"https://github.com/advisories/GHSA-cg6r-mpgc-h9mm","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-cg6r-mpgc-h9mm","identifiers":["GHSA-cg6r-mpgc-h9mm","CVE-2026-64652","GO-2026-6766"]},"retained":false,"historicalAffected":[]},{"revision":"94cabe9e93ee45c4a0baaa1811754344","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6766","aliases":["CVE-2026-64652","GHSA-cg6r-mpgc-h9mm"],"title":"GitHub CLI partially discloses authentication tokens in `gh auth status` output in github.com/cli/cli","description":"GitHub CLI partially discloses authentication tokens in `gh auth status` output in github.com/cli/cli","state":0,"publishedAt":"2026-10-19T21:08:35+00:00","modifiedAt":"2026-10-19T21:31:37.8135888+00:00","affected":[{"ecosystem":"Go","name":"github.com/cli/cli","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/cli/cli/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"2.97.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/cli/cli/security/advisories/GHSA-cg6r-mpgc-h9mm","https://nvd.nist.gov/vuln/detail/CVE-2026-64652","https://github.com/cli/cli/commit/3f6a16a9f8c7fe9676aa8d8f47b399310dd231c3","https://github.com/cli/cli/releases/tag/v2.97.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6766","license":"OSV · upstream source license applies","key":"osv:GO-2026-6766","identifiers":["GO-2026-6766","CVE-2026-64652","GHSA-cg6r-mpgc-h9mm"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-08T15:04:21.9021701+00:00","complete":true,"records":1769,"lastAttemptAt":"2026-11-08T15:04:21.9021701+00:00","lastSuccessAt":"2026-11-08T15:04:22.0639329+00:00","error":null,"lastVerifiedAt":"2026-11-08T15:04:22.0639337+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-eaa64dac63caa79c8d4905619258c41c51b39e461b996124e1a21b5e85e7e738-a99d659450dc34354959c6122d848d4ccd07f29ea21abcc1586cf3d160224c73","complete":true,"records":421173,"lastAttemptAt":"2026-11-08T15:04:21.2655484+00:00","lastSuccessAt":"2026-11-08T15:04:21.1700721+00:00","error":null,"lastVerifiedAt":"2026-11-08T15:04:21.2655484+00:00","snapshotPublishedAt":"2026-11-08T14:26:36+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-383c643166b94ac4b6a615647191978e","complete":true,"records":13654,"lastAttemptAt":"2026-11-08T14:04:47.6384375+00:00","lastSuccessAt":"2026-11-08T13:04:50.073+00:00","error":null,"lastVerifiedAt":"2026-11-08T13:04:50.073+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13706,"expectedIdentifiers":13706,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-08T15:04:21.9021701+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-08T15:04:21.9021701+00:00","lastSuccessAt":"2026-11-08T15:04:22.0646587+00:00","error":null,"lastVerifiedAt":"2026-11-08T15:04:22.064659+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-8ca6ff34a3e94e8ebd3e9b02eb034973","complete":false,"records":13666,"lastAttemptAt":"2026-11-08T15:04:23.3522902+00:00","lastSuccessAt":"2026-11-08T15:04:23.4396154+00:00","error":null,"lastVerifiedAt":"2026-11-08T15:04:23.4396154+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-980593e6977a6d1b4fb1eed5a1ffe88a468736f89f0a06f710924ad59132c023","complete":true,"records":9914,"lastAttemptAt":"2026-11-08T15:04:21.7262836+00:00","lastSuccessAt":"2026-11-08T11:07:07.068788+00:00","error":null,"lastVerifiedAt":"2026-11-08T15:04:21.7262836+00:00","snapshotPublishedAt":"2026-11-08T11:02:46+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-fde804134ecdda0ddd5ff5c26ee1fff5a6fa659311f7ef2e51c6ad54964db0e2","complete":true,"records":1971,"lastAttemptAt":"2026-11-08T15:04:21.421573+00:00","lastSuccessAt":"2026-11-06T19:03:17.0399903+00:00","error":null,"lastVerifiedAt":"2026-11-08T15:04:21.421573+00:00","snapshotPublishedAt":"2026-11-06T18:17:57+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-964c14035e6f0f6478b2870fad6a7ef9f6045876d4a12af2c2e514521e54b6af","complete":true,"records":3055,"lastAttemptAt":"2026-11-08T15:04:21.8578208+00:00","lastSuccessAt":"2026-11-08T11:07:12.1927025+00:00","error":null,"lastVerifiedAt":"2026-11-08T15:04:21.8578208+00:00","snapshotPublishedAt":"2026-11-08T11:02:46+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-f8647d7ba64b1ba0dfdc7130944766d5b36d5b77d18fff0c79e651a4cff3c2b9","complete":true,"records":231293,"lastAttemptAt":"2026-11-08T15:04:21.5248159+00:00","lastSuccessAt":"2026-11-08T11:06:56.2918717+00:00","error":null,"lastVerifiedAt":"2026-11-08T15:04:21.5248159+00:00","snapshotPublishedAt":"2026-11-08T11:02:50+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}