{"id":"CVE-2026-105295","published":"2026-10-05T01:16:29.063","lastModified":"2026-10-06T16:08:43.180","description":"GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate once can intercept later automatic update checks, offer a fake version, and execute code as the user upon installation.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-494"],"vendors":[],"products":[],"references":[{"url":"https://github.com/gitahead/gitahead","tags":[]},{"url":"https://github.com/gitahead/gitahead/blob/v2.7.1/src/app/Application.cpp#L284-L309","tags":[]},{"url":"https://github.com/gitahead/gitahead/blob/v2.7.1/src/update/Updater.cpp#L176-L279","tags":[]},{"url":"https://github.com/gitahead/gitahead/issues/662","tags":[]},{"url":"https://www.vulncheck.com/advisories/gitahead-2.5.0-through-2.7.1-unverified-update-installation-and-tls-bypass","tags":[]}],"exploitRefs":[{"url":"https://github.com/gitahead/gitahead","tags":[]},{"url":"https://github.com/gitahead/gitahead/blob/v2.7.1/src/app/Application.cpp#L284-L309","tags":[]},{"url":"https://github.com/gitahead/gitahead/blob/v2.7.1/src/update/Updater.cpp#L176-L279","tags":[]},{"url":"https://github.com/gitahead/gitahead/issues/662","tags":[]}],"hasPoc":true,"ai":{"summary":"GitAhead's update mechanism fails to verify downloaded updates, allowing attackers to install malicious code during automatic updates. The vulnerability becomes persistent after the first SSL error, enabling continuous interception of update checks.","exploitability":"Exploitation requires a network attacker to present an invalid certificate once, then intercept subsequent update requests; it's moderately difficult but possible with minimal preconditions.","blast_radius":"If exploited, attackers could execute arbitrary code as the user during legitimate update installations, potentially leading to full system compromise through persistent malicious updates.","remediation":"Upgrade to GitAhead 2.7.2 or later to fix the insecure update mechanism and TLS error handling.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["update","tls","rce"],"model":"garnet-coder","analyzedAt":"2026-10-12T08:57:11.428Z"}}