CVE-2018-10857: Debian Linux

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

git-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-annex repository, or content from a private web server on localhost or the LAN.

Affected products

• Debian Debian Linux: version 8.0 only
• Git-Annex Project Git-Annex: affected versions not specified

Published 2018-07-16. Last modified 2026-06-17.