CVE-2017-8386

HIGH LAB

git <2.4.12-2.12.3 - Privilege Escalation

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2017-8386. PoCs published by hhhell, suz1n.

AI-analyzed exploit summary This repository provides a detailed technical analysis and reproduction of CVE-2017-8386, a Git-Shell sandbox bypass vulnerability. The flaw allows authenticated attackers to escape the git-shell restricted environment by exploiting the less pager's interactive command execution via `git-upload-archive --help`.

Description

git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.

Exploits (2)

github WRITEUP

by hhhell · cpoc

https://github.com/hhhell/CVE-Vulnerability-Reproduction/tree/master/CVE-2017-8386

View Code ZIP pw:eip

This repository provides a detailed technical analysis and reproduction of CVE-2017-8386, a Git-Shell sandbox bypass vulnerability. The flaw allows authenticated attackers to escape the git-shell restricted environment by exploiting the less pager's interactive command execution via `git-upload-archive --help`.

Classification

Writeup 98%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Git versions before 2.4.12, 2.5.6, 2.6.7, 2.7.5, 2.8.5, 2.9.4, 2.10.3, 2.11.2, and 2.12.3

Auth required

Prerequisites: SSH access to a Git server with a vulnerable version · Valid SSH private key for authentication

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1203 - Exploitation for Client Execution

mistral-large-3 · analyzed Jul 28, 2026 Full analysis →

nomisec WRITEUP

by suz1n · poc

https://github.com/suz1n/WHS3_vulhub

View Code ZIP pw:eip

This repository provides a detailed writeup and proof-of-concept for CVE-2017-8386, a git-shell sandbox bypass vulnerability. It explains how to exploit the 'less' command within git-shell to achieve remote code execution (RCE).

Classification

Writeup 100%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Git-shell 2.12.2

Auth required

Prerequisites: Docker · Docker-Compose · SSH access · Git 2.12.2 · less command installed

MITRE ATT&CK