CVE-2026-11745
Published
CVSS v3
N/A
CVSS v2
N/A
Affected
1
PROJECT
Description
A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verify remote host keys for git+ssh:// connections, allowing an on-path attacker to perform man-in-the-middle attacks and compromise mirrored repositories.
Highly-available version-controlled service configuration repository based on Git, ZooKeeper and HTTP/2
GitHub