CVE-2016-7793 in git-hub
Summary
by MITRE
sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 05/14/2026
The CVE-2016-7793 vulnerability affects the sociomantic-tsunami git-hub library version 0.10.2 and earlier, presenting a critical remote code execution risk through maliciously crafted repository URLs. This vulnerability resides in the library's handling of git repository URLs during cloning operations, where insufficient input validation allows attackers to inject malicious commands that get executed on the target system. The flaw specifically manifests when the library processes repository URLs that contain specially crafted parameters or protocols that bypass normal validation checks, enabling arbitrary code execution in the context of the running process.
The technical implementation of this vulnerability stems from improper sanitization of repository URL inputs within the git-hub library's cloning mechanism. When a user or application passes a repository URL to the library, the code fails to properly validate or escape special characters that could be interpreted as shell commands or additional parameters. This vulnerability aligns with CWE-78, which describes improper neutralization of special elements used in OS commands, and represents a classic command injection flaw that can be exploited by attackers to execute arbitrary code on the affected system. The issue occurs at the input processing layer where user-supplied URLs are directly incorporated into system commands without adequate sanitization.
The operational impact of this vulnerability is severe and far-reaching, as it allows remote attackers to gain complete control over systems that use vulnerable versions of the sociomantic-tsunami git-hub library. Attackers can leverage this flaw to execute malicious payloads, escalate privileges, access sensitive data, or establish persistent backdoors within the affected environment. Systems that automatically clone repositories from untrusted sources, such as continuous integration servers, automated deployment tools, or any application that integrates with git-hub, become prime targets for exploitation. The vulnerability can be exploited through various attack vectors including web applications that accept user-provided repository URLs, automated build systems, or any software that dynamically constructs git clone commands based on external input.
Mitigation strategies for CVE-2016-7793 involve immediate upgrading to version 0.10.3 or later of the sociomantic-tsunami git-hub library where the vulnerability has been patched. Organizations should also implement strict input validation and sanitization measures for any repository URLs processed by their applications, particularly those that interface with git operations. Network-level defenses such as web application firewalls can help detect and block malicious URL patterns, while principle of least privilege enforcement should limit the execution permissions of processes that handle git operations. Additionally, security teams should conduct thorough vulnerability assessments to identify all systems using vulnerable library versions and implement monitoring for suspicious git clone activities that may indicate exploitation attempts. This vulnerability demonstrates the critical importance of input validation in security-sensitive applications and aligns with ATT&CK technique T1059 for command and scripting interpreter, highlighting the need for robust sanitization of external inputs in system interfaces.