---
id: 6857
title: "Securing GitHub: Wiz Research uncovers Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854)"
cve: CVE-2026-3854
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854"
published_at: "2026-04-28T15:30:00Z"
tags: ["rce", "vulnerability-research", "github", "enterprise-security", "cve-2026-3854", "wiz-research"]
phying_url: "https://phying.com/item/6857"
lang: en
---

# Securing GitHub: Wiz Research uncovers Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854)

## Summary

CVE-2026-3854: a Wiz-discovered injection flaw let any authenticated user get RCE on GitHub's shared storage nodes via one git push; fixed within hours, but 88% of GHES instances stayed vulnerable.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2026-3854
- **Published:** 2026-04-28T15:30:00Z
- **Original:** https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854
- **Phying News:** https://phying.com/item/6857