# CVE-2026-104608: GitHub Enterprise Server use-after-free in Git service babeld

Source: https://junglewise.ai/threats/cve-2026-104608-a-remote-code-execution-vulnerability-was-identified-in-github  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-03. Updated: 2026-11-03  
License: CC BY 4.0 with a link back

CVE-2026-104608 · Severity: info · Published 2026-11-03

GitHub Enterprise Server, a self-hosted git platform used by organizations to manage code repositories, contains a remote code execution vulnerability in its Git service (babeld). An attacker with SSH access can exploit a use-after-free bug to run arbitrary commands and steal sensitive environment secrets from the service.

Technologies: [GitHub Enterprise Server](https://junglewise.ai/threats/technologies/github-enterprise-server). Vendors: [GitHub](https://junglewise.ai/threats/vendors/github).

## Quick answers

**Is CVE-2026-104608 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-104608 being exploited in the wild.

**How severe is CVE-2026-104608?** Informational severity, published 3 November 2026.

**Which products and versions are affected?** GitHub Enterprise Server prior to 3.23, including 3.22.x before 3.22.3, 3.21.x before 3.21.8, 3.20.x before 3.20.10, and 3.19.x before 3.19.14.

**Is there a fix for CVE-2026-104608?** Yes: fixed in Enterprise Server 3.22.3, 3.21.8, 3.20.10, 3.19.14, and 3.23. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-104608 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-104608?** Check whether you run GitHub Enterprise Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Enterprise Server 3.22.3, 3.21.8, 3.20.10, 3.19.14, and 3.23

## Technical details

The vulnerability is a use-after-free in babeld's handling of SSH callbacks. The service holds references into internal collections while calling the SSH library, and a re-entrant callback can modify those collections and invalidate the references. An authenticated attacker with SSH access can trigger a controlled write to gain arbitrary code execution as the babeld process, including access to environment secrets. Exploitation requires knowledge of per-build memory offsets; failed attempts crash the daemon.

## Affected products

- GitHub Enterprise Server prior to 3.23, including 3.22.x before 3.22.3, 3.21.x before 3.21.8, 3.20.x before 3.20.10, and 3.19.x before 3.19.14

## Timeline

- 2026-11-03: disclosed

## References

- [https://docs.github.com/en/enterprise-server@3.19/admin/release-notes](https://docs.github.com/en/enterprise-server@3.19/admin/release-notes)
- [https://docs.github.com/en/enterprise-server@3.20/admin/release-notes](https://docs.github.com/en/enterprise-server@3.20/admin/release-notes)

## Related threats

- [GitHub Enterprise Server out-of-bounds read in SSH key negotiation](https://junglewise.ai/threats/cve-2026-118237-an-out-of-bounds-read-vulnerability-was-identified-in-github)
- [GitHub Enterprise Server CSRF in ChatOps integration removal](https://junglewise.ai/threats/cve-2026-110288-a-cross-site-request-forgery-vulnerability-was-identified-in)
- [GitHub Enterprise Server SSRF in secret scanning validator](https://junglewise.ai/threats/cve-2026-96890-a-server-side-request-forgery-ssrf-vulnerability-was-identified)
- [GitHub Enterprise Server missing authorization in GraphQL API](https://junglewise.ai/threats/cve-2026-103620-a-missing-authorization-vulnerability-was-identified-in-github)
- [GitHub Enterprise Server notebook viewer SSRF](https://junglewise.ai/threats/cve-2026-77987-a-server-side-request-forgery-ssrf-vulnerability-was-identified)