GitHub: CVE-2026-32631 'git clone' from manipulated repositories can leak NTLM hashes
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-32631 is regarding a vulnerability where it is possible to obtain a user's NTLM hash by tricking them into cloning a malicious repository, or checking out a malicious branch that accesses an attacker-controlled server. By default, NTLM authentication does not need any user interaction. GitHub created this CVE on their behalf. The documented Visual Studio updates incorporate updates in Git which address this vulnerability. Please see CVE-2026-32631 for more information.
🎯 Affected products5
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
- Microsoft Visual Studio 2022 version 17.12
- Microsoft Visual Studio 2022 version 17.14
- Microsoft Visual Studio 2026 version 18.4
✅ Remediation
KBRelease Notes (Security Update) — fixed build 16.11.55 KBRelease Notes (Security Update) — fixed build 15.9.79 KBRelease Notes (Security Update) — fixed build 17.12.19 KBRelease Notes (Security Update) — fixed build 17.14.30 KBRelease Notes (Security Update) — fixed build 18.4.4
🔗 References (8)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32631
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 16.11
- referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 15.9
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.4
- referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes