Description
GitHub CLI (gh) is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the user's non-loopback local IP addresses by other hosts that can route to the user's machine. This behavior does not change the GitHub-side visibility of the Codespaces port. Instead, it exposes the forwarded service through a wildcard-bound listener on the user's local machine, even when the source Codespaces port remains private. Exploitation requires a network-adjacent attacker to reach the victim's machine while forwarding is active. This issue is fixed in version 2.98.0.
Published: 2026-08-25
Score: 2.1 Low
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized local network exposure of forwarded services
Action: Update to v2.98.0
AI Analysis

Impact

GitHub CLI versions 2.28.0 through 2.97.0 create a listener for the commands gh codespace ports forward that binds to all network interfaces instead of only the loopback interface. Consequently a service running inside a Codespace can be accessed by any host that can reach the user’s machine while port forwarding is active, even though the Codespace port remains intended as private on the GitHub side.

Affected Systems

The affected product is the official GitHub command line tool (gh) identified by the vendor/product pair cli:cli. All releases between 2.28.0 and 2.97.0 inclusive are impacted; the vulnerability is resolved in release 2.98.0.

Risk and Exploitability

The CVSS score of 2.1 indicates a low severity risk. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. An attacker must be on a network that can reach the victim’s host and must have port forwarding enabled to exploit the weakness. The problem does not give an attacker remote code execution or privilege escalation capability; it merely exposes a private service to the local network.

Generated by OpenCVE AI on August 26, 2026 at 02:19 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the GitHub CLI to version 2.98.0 or newer.
  • Configure your firewall or host-based rules to block incoming connections to the forwarded port on non‑loopback interfaces, ensuring the service remains reachable only from the local machine.
  • Avoid using the gh codespace ports forward command when local network exposure is unacceptable; instead, access the service via SSH tunnels or other secure channels.

Generated by OpenCVE AI on August 26, 2026 at 02:19 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 31 Aug 2026 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 4.6, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N'}

threat_severity

Moderate

Wed, 26 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 26 Aug 2026 03:45:00 +0000

Type Values Removed Values Added
First Time appeared Cli
Cli cli
Vendors & Products Cli
Cli cli

Tue, 25 Aug 2026 21:15:00 +0000

Type Values Removed Values Added
Description GitHub CLI (gh) is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the user's non-loopback local IP addresses by other hosts that can route to the user's machine. This behavior does not change the GitHub-side visibility of the Codespaces port. Instead, it exposes the forwarded service through a wildcard-bound listener on the user's local machine, even when the source Codespaces port remains private. Exploitation requires a network-adjacent attacker to reach the victim's machine while forwarding is active. This issue is fixed in version 2.98.0.
Title GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default
Weaknesses CWE-1327
CWE-668
References
Metrics cvssV4_0

{'score': 2.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Cli Cli
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-08-26T14:39:06.844Z

Reserved: 2026-08-10T17:57:26.144Z

Link: CVE-2026-72924

cve-icon Vulnrichment

Updated: 2026-08-26T14:39:04.014Z

cve-icon NVD

Status : Deferred

Published: 2026-08-25T21:17:45.030

Modified: 2026-09-09T21:07:31.353

Link: CVE-2026-72924

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-25T21:03:11Z

Links: CVE-2026-72924 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-26T03:30:03Z

Weaknesses
  • CWE-1327

    Binding to an Unrestricted IP Address

  • CWE-668

    Exposure of Resource to Wrong Sphere