Skip to content
OpenAdvisories
Medium · 5.5 CVE-2026-11968 EUVD-2026-38733GHSA-2h5c-f427-3wjr

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') in TortoiseGit

Published Jun 24, 2026 · Updated Jun 24, 2026 · Assigned by GitLab

Vendor: TortoiseGit team Product: TortoiseGit

Description

Argument Injection in TortoiseGitBlame via Malicious Git History Filenames Leads to Arbitrary File Write in TortoiseGit

Affected products

VendorProductAffectedFixed
TortoiseGit team TortoiseGit 1.8.10.0 – < 2.19.0 2.19.0

Advisories 1

References