Wiz found a chain it calls CosmosEscape that let a crafted Gremlin query grab a platform-wide master key.
CVE-2026-3854 allowed any authenticated user to compromise GitHub backend servers via injected git push options, exposing millions of private repositories.…
Sign in to your account
Remember me