CVE-2025-48938
Published: 30 May 2025
Summary
CVE-2025-48938 is a low-severity Trust Boundary Violation (CWE-501) vulnerability in Cli Go-Gh. Its CVSS base score is 2.6 (Low).
Operationally, ranked in the top 39.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-16493
Vulnerability details
go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's…
more
machine by replacing HTTP URLs provided by GitHub with local file paths for browsing. In `2.12.1`, `Browser.Browse()` has been enhanced to allow and disallow a variety of scenarios to avoid opening or executing files on the filesystem without unduly impacting HTTP URLs. No known workarounds are available other than upgrading.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Establishes and maintains trust boundaries with external organizations before allowing their systems to interact with organization resources.
Prevents information from crossing trust boundaries without explicit approved authorizations.
Defining interfaces, controls, and trust responsibilities in agreements helps prevent violations of trust boundaries during data exchanges.
Authorizing and reviewing connections helps maintain proper trust boundaries between internal components.
Controlling media movement outside controlled areas maintains separation between internal and external trust boundaries.
Review of inter-system matching programs identifies and corrects trust-boundary violations before data crosses organizational or policy domains.
Defines explicit trust boundaries for PII use via documented purposes and prevents processing outside those boundaries.
Explicitly binding attributes to information crossing trust boundaries prevents loss of security context that leads to trust-boundary violations.