CVE-2024-52308

CVE-2024-52308 describes a critical remote code execution vulnerability affecting GitHub CLI versions 2.6.1 and earlier. This flaw allows an attacker to execute arbitrary code on a user's workstation when they use 'gh codespace ssh' or 'gh codespace logs' commands to connect to a malicious codespace SSH server. The vulnerability stems from improper validation of remote username information, which can be manipulated to inject SSH arguments. With a CVSS score of 9.6 (CRITICAL), this vulnerability has a high severity, indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability. The user interaction requirement (UI:R) means the user must connect to a malicious codespace. The vulnerability has been patched in GitHub CLI v2.62.0. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. Despite the lack of current exploitation, the high severity and ease of exploitation make patching a priority for affected users.