N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-48938

CVE-2025-48938: Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

Summary

A security vulnerability has been identified in go-gh where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URLs provided by GitHub with local file paths for browsing.

Details

The GitHub CLI and CLI extensions allow users to transition from their terminal for a variety of use cases through the Browser capability in github.com/cli/go-gh/v2/pkg/browser:

Using the -w, --web flag, GitHub CLI users can view GitHub repositories, issues, pull requests, and more using their web browser
Using the gh codespace command set, GitHub CLI users can transition to Visual Studio Code to work with GitHub Codespaces

This is done by using URLs provided through API responses from authenticated GitHub hosts when users execute gh commands.

Prior to 2.12.1, Browser.Browse() would attempt to open the provided URL using a variety of OS-specific approaches regardless of the scheme. An attacker-controlled GitHub Enterprise Server could modify API responses to use a specially tailored local executable path instead of HTTP URLs to resources. This could allow the attacker to execute arbitrary executables on the user's machine.

In 2.12.1, Browser.Browse() has been enhanced to allow and disallow a variety of scenarios to avoid opening or executing files on the filesystem without unduly impacting HTTP URLs:

URLs with http://, https://, vscode://, vscode-insiders:// protocols are supported
URLs with file:// protocol are unsupported
URLs matching files or directories on the filesystem are unsupported
URLs matching executables in the user's path are unsupported

URLs without protocols will be browsable if none of these other conditions apply.

As we have more information about use cases, maintainers can expand these capabilities for an improved user experience that allows configuring allowed URL schemes and/or prompt the user for an unexpected user case and confirming whether to continue.

Impact

Successful exploitation could cause users of the attacker-controlled GitHub Enterprise Server to execute arbitrary commands.

Remediation and Mitigation

Upgrade go-gh to 2.12.1

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-48938

CVE-2025-48938:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
github.com/cli/go-gh/v2	go	< 2.12.1	2.12.1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, identified as GHSA-g9f5-x53j-h563, allowed an attacker-controlled GitHub Enterprise Server to cause arbitrary command execution on a user's machine. This was possible because the go-gh library's URL browsing functionality did not properly validate incoming URLs before attempting to open them.

The core of the vulnerability lay in the (*Browser).browse method within pkg/browser/browser.go. This method would receive a URL string and, prior to the fix, would attempt to open it using OS-specific commands or a configured browser launcher without adequately checking if the URL was a safe HTTP(S) URL or a local file path (which could be an executable or trigger execution of an associated application).

The public API (*Browser).Browse serves as the entry point for this functionality and calls the internal (*Browser).browse method. Thus, (*Browser).Browse is the function that developers would use, making it the gateway to the vulnerable code.

The patch in commit a08820a13f257d6c5b4cb86d37db559ec6d14577 addresses this by modifying the (*Browser).browse method. It introduces a new validation function, isPossibleProtocol, which is called at the beginning of browse. This new function checks if the URL scheme is among a list of allowed schemes (e.g., http, https, vscode). It explicitly disallows file:// schemes, URLs that match existing files or directories on the filesystem, and URLs that match executables in the user's PATH. This pre-validation ensures that only intended types of URLs are processed, mitigating the risk of opening malicious local paths.

Therefore, both (*Browser).browse (where the flawed logic and the patch reside) and (*Browser).Browse (the public entry point mentioned in the advisory) are identified as the key functions related to this vulnerability. During exploitation, these functions would appear in a runtime profile as they process the malicious URL.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.