CVE-2026-59831 Details
Description
GitHub CLI (gh) is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopback HTTP or HTTPS address, allowing a crafted vscode:// or vscode-insiders:// URL to be handed to VS Code. This issue is fixed in version 2.96.0.
A remote code execution vulnerability exists in GitHub CLI versions 2.10.0 through 2.95.0. When users connect to a malicious Codespace using the 'gh codespace jupyter' command, the CLI opens a JupyterLab URL provided by a process inside the Codespace. This URL is not validated to ensure it is a loopback HTTP or HTTPS address. As a result, a crafted 'vscode://' or 'vscode-insiders://' URL can be sent to Visual Studio Code, potentially leading to unauthorized command execution on the user's machine.
Users should upgrade GitHub CLI to version 2.96.0 or later. Exercise caution when using the 'gh codespace jupyter' command with untrusted Codespaces.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-829 | Inclusion of Functionality from Untrusted Control Sphere | [email protected] |
Affected Products
No affected product data is available for this CVE.
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 14, 2026 | CVE Modified | CISA-ADP |
| Jul 9, 2026 | New CVE Received | [email protected] |