Executive brief
Gitingest is a tool that extracts and formats Git repository contents for AI processing. A flaw in hostname validation allows attackers to submit URLs pointing to arbitrary servers, which the application will connect to. This can lead to disclosure of sensitive GitHub personal access tokens embedded in authentication credentials, compromising account security and potentially exposing private code repositories.
Technical details
The vulnerability is a hostname validation bypass in the _validate_host function affecting Gitingest through version 0.3.1. The function incorrectly accepts any hostname beginning with git., gitlab., or github. prefixes without verifying membership in a known-hosts allowlist. An attacker can craft a repository URL with an attacker-controlled hostname (e.g., git.attacker.com) to trigger outbound connections from the application server to arbitrary hosts. If the application sends HTTP basic authentication credentials (including GitHub personal access tokens) during these requests, tokens are disclosed to the attacker. The attack requires network reachability to the application but no authentication. A patch should implement strict hostname validation against a curated allowlist.
Affected products
- coderamp-labs Gitingest through 0.3.1
Timeline
- 2026-08-28: disclosed
- 2026-08-28: advisory: CVE-2026-82289 published