CVE-2026-11968

Argument Injection in TortoiseGitBlame via Malicious Git History Filenames Leads to Arbitrary File Write in TortoiseGit

Score

CVSS 3.1 5.5 Medium

Status

Deferred - cve@gitlab.com

Published

2026-06-24

Last modified

2026-10-25

Weaknesses

CWE-88

Affected products

• Tortoisegit (Tortoisegit Team)

References

• https://tortoisegit.org/issue/4269
• https://gitlab.com/tortoisegit/tortoisegit/-/commit/7052e3ef61cd104f8a90fb3dcdfb403cbc8c1773