---
id: CVE-2026-100419
title: >-
  gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability
  in the worktree checkout mechanism that allows attackers to escape the
  worktree directory via symlink manipulation
summary: >-
  gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability
  in the worktree checkout mechanism that allows attackers to escape the
  worktree directory via symlink manipulation. During forced checkout with
  overwrite_exist…
severity: high
cvss: 7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-59
vendor: GitoxideLabs
product: gitoxide
affected:
  - gitoxide < 0.23.0
published: '2026-09-25'
updated: '2026-09-25'
sourceUpdated: '2026-09-25T22:17:10.743'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-100419'
references:
  - url: 'https://github.com/GitoxideLabs/gitoxide'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/GitoxideLabs/gitoxide/blob/gix-fs-v0.22.1/gix-fs/src/stack.rs#L185-L196
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/GitoxideLabs/gitoxide/commit/b62498378b8bc2c95863a044b700f2063b0b5875
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-6p9q-f2xg-6pr5
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-f89h-2fjh-2r9q
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/gitoxide-gix-fs-before-0.23.0-worktree-escape-via-symlink
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-25T22:20:31.554Z'
---

## Overview

gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwrite_existing enabled, attackers can craft malicious repository trees where symlink entries replace validated directories, causing subsequent files to be written outside the worktree through the symlink for code execution or file manipulation.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.