GitHub fixes RCE flaw that gave access to millions of private repos

GitHub patched a critical remote code execution vulnerability (CVE-2026-3854) in early March that could have allowed attackers to access millions of private repositories. The flaw posed a significant risk to the security of private codebases and sensitive information stored on the platform. The vulnerability has been fixed by GitHub to prevent unauthorized access to private repositories through remote code execution attacks.