CVE-2026-9132: A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to r

A missing authorization vulnerability in GitHub Enterprise Server allowed authenticated users to read source code from private repositories they shouldn't have access to. The vulnerability existed in a Copilot pull request description feature that compared code across repositories without checking if the user had permission to view the target repository, and it required the attacker to already have read access to at least one repository on the system.