Vulnerability Description
GitHub CLI (gh) is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopback HTTP or HTTPS address, allowing a crafted vscode:// or vscode-insiders:// URL to be handed to VS Code. This issue is fixed in version 2.96.0.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/cli/cli/commit/b300f2ec7ec9dc9addc39b2ad88c54097ded7ca0
- https://github.com/cli/cli/releases/tag/v2.96.0
- https://github.com/cli/cli/security/advisories/GHSA-8cg3-r6g9-fpg2
FAQ
What is CVE-2026-59831?
CVE-2026-59831 is a vulnerability with a CVSS score of 4.4 (MEDIUM). GitHub CLI (gh) is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens ...
How severe is CVE-2026-59831?
CVE-2026-59831 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-59831?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.