CVE-2026-59831 MEDIUM

CVE-2026-59831: GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace

Vendor Cli

Product cli

Weakness CWE-829 · Inclusion from untrusted sphere

Published July 9, 2026

Last update July 14, 2026

View on NVD All CVEs

CVSS base score

4.4/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

GitHub CLI (gh) is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopback HTTP or HTTPS address, allowing a crafted vscode:// or vscode-insiders:// URL to be handed to VS Code. This issue is fixed in version 2.96.0.

Key dates

02Disclosure timeline

July 9, 2026 CVE published

July 14, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-59831 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/829.html AskarLabs — CWE-829 write-up Inclusion of Functionality from Untrusted Control Sphere

Related vulnerabilities

CVE-2026-59831: GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace

01Description

02Disclosure timeline

03References

04Related CVE