EUVD-2026-66116Severity by source
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent network only; high complexity because forwarding session must be active; no attacker credentials needed to connect to open port; victim must initiate forwarding (UI:R).
Primary rating from Vendor (github).
CVSS VectorVendor: github
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionCVE.org
GitHub CLI (gh) is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the user's non-loopback local IP addresses by other hosts that can route to the user's machine. This behavior does not change the GitHub-side visibility of the Codespaces port. Instead, it exposes the forwarded service through a wildcard-bound listener on the user's local machine, even when the source Codespaces port remains private. Exploitation requires a network-adjacent attacker to reach the victim's machine while forwarding is active. This issue is fixed in version 2.98.0.
AnalysisAI
Port forwarding in GitHub CLI versions 2.28.0 through 2.97.0 binds its local TCP listener to all network interfaces (0.0.0.0) rather than loopback only, exposing forwarded Codespace services to any adjacent host that can route to the user's machine while gh codespace ports forward is active. Developers using this command on shared or untrusted networks - corporate Wi-Fi, conference networks, co-working LAN segments - may unintentionally expose Codespace services that were intended to remain private. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The victim must be actively running `gh codespace ports forward` using GitHub CLI version 2.28.0 through 2.97.0 - the vulnerable condition exists only while this command is executing. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | With a CVSS 4.0 score of 2.1, this vulnerability sits at the very low end of the severity scale, which accurately reflects its structurally constrained impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade GitHub CLI to v2.98.0 or later, which corrects the listener binding to restrict exposure to the loopback interface. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-668 – Exposure of Resource to Wrong Sphere
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today