Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, a user with access to add/change a GitRepository record could …

Published:

27 mei 2026 om 22:00:00

Alert date:

28 mei 2026 om 20:05:25

Source:

nvd.nist.gov

Network Infrastructure, Enterprise Applications

A vulnerability in Nautobot Network Source of Truth and Network Automation Platform allows users with GitRepository access to manipulate the current_head field via REST API. This unintended functionality can cause local repository clones to checkout incorrect commits, resulting in misleading state or complete repository failure. The issue affects versions prior to 2.4.33 and 3.1.2, potentially disrupting network automation workflows until manual remediation.

Technical details

Mitigation steps:

Affected products:

Nautobot