CVE-2017-8386: git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2....

Security readout for executives and security teams

This affects older Git installations using git-shell. An authenticated remote user could use a specially named repository beginning with a dash to gain privileges beyond the intended restricted Git shell. Exposure is mainly self-hosted Git servers or OS packages that were not updated after the 2017 vendor fixes. Likely exposure is limited to systems offering authenticated Git access through git-shell, especially legacy Linux distributions or self-managed Git hosting appliances that still run affected Git versions. Treat as a targeted legacy-infrastructure risk. It is not marked as actively exploited in the provided sources, but affected Git servers can expose privileged access paths and should be patched during normal vulnerability remediation cycles. Mitigation focus: Upgrade Git to a fixed version or supported vendor package.; Prioritize servers exposing authenticated git-shell access.; Check Ubuntu, Fedora, Gentoo, Red Hat, Debian, or SUSE guidance for platform-specific packages..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.