{"id":"EUVD-2026-54222","enisaUuid":"53884aed-b823-305e-bddb-6632847e0481","description":"GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify  builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow  flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is treated as a regular expression rather than a literal string. Because GitHub permits characters such as  `.`  in organization, repository, and workflow path names and  `.`  is a regex wildcard, an attacker can register a lookalike name (for example github/artifact.attestations-workflows) that satisfies a matcher intended for a different trusted signer (github/artifact-attestations-workflows), bypassing the intended Sigstore attestation verification. Exploitation requires the attacker to create a plausible lookalike repository and produce valid attestations from it, which could undermine supply chain verification for CI/CD pipelines or policy gates that pin trust to a specific signing workflow. This issue is fixed in version 2.97.0.","datePublished":"Aug 6, 2026, 6:41:54 PM","dateUpdated":"Aug 8, 2026, 2:23:17 AM","baseScore":2.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N","references":"https://github.com/cli/cli/security/advisories/GHSA-mm27-mwq9-fr5g\nhttps://github.com/cli/cli/commit/55dbb4dc6b7edb10b48e3d7fc5bccd32318d1b55\nhttps://github.com/cli/cli/releases/tag/v2.97.0\n","aliases":"CVE-2026-64655\nGHSA-mm27-mwq9-fr5g\n","assigner":"GitHub_M","epss":0.34,"enisaIdProduct":[{"id":"5c50fd0c-f504-3d78-a8aa-7acc43c81da1","product":{"name":"cli","vendor":{"name":"cli"}},"product_version":"\u003c 2.97.0"}],"enisaIdVendor":[{"id":"70dccde0-c120-3ef1-ac15-732ee74318fd","vendor":{"name":"cli"}}],"enisaIdVulnerability":[{"id":"1737c54f-7a0f-3b25-aeb4-028178a91f47","vulnerability":{"id":"GHSA-mm27-mwq9-fr5g","description":"GitHub CLI allows attestation verification bypass through unescaped regex metacharacters","datePublished":"Oct 15, 2026, 6:08:20 PM","dateUpdated":"Oct 15, 2026, 6:08:20 PM","baseScore":0.0,"references":"https://github.com/cli/cli/security/advisories/GHSA-mm27-mwq9-fr5g\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-64655\nhttps://github.com/cli/cli/commit/55dbb4dc6b7edb10b48e3d7fc5bccd32318d1b55\nhttps://github.com/cli/cli\nhttps://github.com/cli/cli/releases/tag/v2.97.0\n","enisa_id":"EUVD-2026-54222\n","aliases":"CVE-2026-64655\nGHSA-mm27-mwq9-fr5g\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:48 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"1c52cd36-9b45-3a56-80c6-2ade995534cb","vulnerability":{"id":"CVE-2026-64655","description":"GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify  builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow  flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is treated as a regular expression rather than a literal string. Because GitHub permits characters such as  `.`  in organization, repository, and workflow path names and  `.`  is a regex wildcard, an attacker can register a lookalike name (for example github/artifact.attestations-workflows) that satisfies a matcher intended for a different trusted signer (github/artifact-attestations-workflows), bypassing the intended Sigstore attestation verification. Exploitation requires the attacker to create a plausible lookalike repository and produce valid attestations from it, which could undermine supply chain verification for CI/CD pipelines or policy gates that pin trust to a specific signing workflow. This issue is fixed in version 2.97.0.","datePublished":"Aug 6, 2026, 6:41:54 PM","dateUpdated":"Aug 8, 2026, 2:23:17 AM","status":"PUBLISHED","baseScore":2.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N","references":"https://github.com/cli/cli/security/advisories/GHSA-mm27-mwq9-fr5g\nhttps://github.com/cli/cli/commit/55dbb4dc6b7edb10b48e3d7fc5bccd32318d1b55\nhttps://github.com/cli/cli/releases/tag/v2.97.0\n","enisa_id":"EUVD-2026-54222\n","assigner":"GitHub_M","epss":0.34,"dataProcessed":"Nov 7, 2026, 7:19:19 AM","vulnerabilityProduct":[{"id":"a68f594b-b60a-3957-b40d-20f8eda8f40a","product":{"name":"cli","vendor":{"name":"cli"}},"product_version":"\u003c 2.97.0"}],"vulnerabilityVendor":[{"id":"c29e4d26-8014-32f6-bb60-49c47278cdaf","vendor":{"name":"cli"}}]}}],"enisaIdAdvisory":[{"id":"2ac81a37-71ea-30dd-b36e-419c89fc6b01","advisory":{"id":"msrc_CVE-2026-64655","description":"GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching","datePublished":"Aug 11, 2026, 1:03:03 AM","dateUpdated":"Aug 23, 2026, 2:51:04 PM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-64655.json\n","aliases":"CVE-2026-64655\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"3a2c3a3c-7e05-3a62-85a2-a2f8d3c8f46a","product":{"name":"gh","vendor":{"name":"r-lib"}}},{"id":"ce39cd60-4ce9-3b72-8550-a0ff06b3021e","product":{"name":"azl3 gh 0:2.62.0-20.azl3","vendor":{"name":"Microsoft"}}},{"id":"e71f3831-7704-345d-a025-37c9f57bd61f","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"fbfe8b08-0fc3-3ef7-a48d-727063e6440b","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}}]}},{"id":"7242f21d-5948-3afc-9407-1b44a54e8327","advisory":{"id":"openSUSE-SU-2026:21663-1","description":"Security update for gh","summary":"Security update for gh","datePublished":"Aug 26, 2026, 4:15:07 PM","dateUpdated":"Sep 17, 2026, 5:42:37 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21663-1.json\nhttps://bugzilla.suse.com/1266618\nhttps://bugzilla.suse.com/1276661\nhttps://bugzilla.suse.com/1276662\nhttps://bugzilla.suse.com/1276663\nhttps://bugzilla.suse.com/1276664\nhttps://www.suse.com/security/cve/CVE-2026-39821/\nhttps://www.suse.com/security/cve/CVE-2026-64652/\nhttps://www.suse.com/security/cve/CVE-2026-64653/\nhttps://www.suse.com/security/cve/CVE-2026-64654/\nhttps://www.suse.com/security/cve/CVE-2026-64655/\n","aliases":"CVE-2026-39821\nCVE-2026-64652\nCVE-2026-64653\nCVE-2026-64654\nCVE-2026-64655\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0a3324d2-cd24-33d3-9513-5c6b2a307054","product":{"name":"gh-bash-completion-0:2.98.0-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"1dee3c84-204f-3d47-9452-8c09f515f66a","product":{"name":"gh-fish-completion-0:2.98.0-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"27da8119-d16a-3860-bbc3-1fe563ca7f48","product":{"name":"gh-0:2.98.0-bp160.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3f7332f1-f44a-3596-bd5e-75cac50510d6","product":{"name":"gh-0:2.98.0-bp160.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"726f83ed-682b-35ed-90d5-a145dda9e535","product":{"name":"gh-zsh-completion-0:2.98.0-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"802a8b47-750a-3e55-a3f5-b562f22ce757","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"d35cb0a2-935b-33b2-8085-cea381699246","product":{"name":"gh-0:2.98.0-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"fd3bef13-01da-3dcc-9a1c-1194658d0526","product":{"name":"gh-0:2.98.0-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"9ad89cab-7754-3f8a-a4f5-271ec0481cb5","advisory":{"id":"openSUSE-SU-2026:11530-1","description":"gh-2.97.0-1.1 on GA media","summary":"gh-2.97.0-1.1 on GA media","datePublished":"Aug 17, 2026, 12:00:00 AM","dateUpdated":"Sep 17, 2026, 5:19:55 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11530-1.json\nhttps://www.suse.com/security/cve/CVE-2026-64652/\nhttps://www.suse.com/security/cve/CVE-2026-64653/\nhttps://www.suse.com/security/cve/CVE-2026-64654/\nhttps://www.suse.com/security/cve/CVE-2026-64655/\n","aliases":"CVE-2026-64652\nCVE-2026-64653\nCVE-2026-64654\nCVE-2026-64655\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"05081f45-6c93-3175-b06d-c0fd84ab2303","product":{"name":"gh-zsh-completion-0:2.97.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"11ad0a39-ef69-3433-815c-841d589375e2","product":{"name":"gh-fish-completion-0:2.97.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"257cce34-e582-3ce6-9b79-3dc2d99690c7","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"2601d2a6-804f-3a93-ad29-5129458f0932","product":{"name":"gh-fish-completion-0:2.97.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2fe30d22-756e-30e7-866b-580542648347","product":{"name":"gh-zsh-completion-0:2.97.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"4548076c-5f54-35bf-bf6d-f5057b8f29c0","product":{"name":"gh-bash-completion-0:2.97.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"59c96c25-3324-30b7-8cbf-2419a2f53a2b","product":{"name":"gh-bash-completion-0:2.97.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"6c45aaea-b025-337d-9dd7-63622d539cdf","product":{"name":"gh-fish-completion-0:2.97.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"6dda8d88-67d9-3063-be1c-a37f0abbbdde","product":{"name":"gh-0:2.97.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"713eac1d-ba87-3fa6-a393-60f10bd4fd44","product":{"name":"gh-0:2.97.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"74253eff-db36-3fad-a1b6-eab2ec5c53fc","product":{"name":"gh-fish-completion-0:2.97.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"854261ae-c52b-3b68-924a-e642a3d77bce","product":{"name":"gh-bash-completion-0:2.97.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"adbd65af-980f-354e-887b-762b9f923e94","product":{"name":"gh-0:2.97.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b5aabe9e-bc63-3b20-aad2-7a71e44501f8","product":{"name":"gh-bash-completion-0:2.97.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"c35dd7cd-804a-32cb-bc26-5c3bcc7a80ae","product":{"name":"gh-zsh-completion-0:2.97.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d58410a8-b2f3-36e4-bf33-fe2cc866f8f0","product":{"name":"gh-0:2.97.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"fee80ac9-97ec-357d-93e1-af2c18c0cf25","product":{"name":"gh-zsh-completion-0:2.97.0-1.1.x86_64","vendor":{"name":"SUSE"}}}]}}]}