This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows. This RCE (Remote Code Execution) vulnerability, wit…

High CVSS 8.0

CVECVE-2026-21575

First seen2026-08-10 22:15 UTC

Disclosed2026-07-21 18:16 UTC

Last updated2026-08-10 22:15 UTC

Channel statusauto

Summary

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires user interaction. Atlassian recommends that Sourcetree for Mac and Sourcetree for Windows customers upgr…

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://confluence.atlassian.com/pages/viewpage.action?pageId=1821999345 Vendor Advisory
https://jira.atlassian.com/browse/SRCTREE-8275 Issue Tracking

Timeline

2026-08-10 nvd_ingest NVD