Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permission. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.
CVSS Details
- CVSS 3.1 Base Score: 8.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-gitalma-upgrade-git-allalma-upgrade-git-corealma-upgrade-git-core-docalma-upgrade-git-credential-libsecretalma-upgrade-git-daemonalma-upgrade-git-emailalma-upgrade-git-guialma-upgrade-git-instawebalma-upgrade-git-subtreealma-upgrade-git-svnalma-upgrade-gitkalma-upgrade-gitwebalma-upgrade-perl-gitalma-upgrade-perl-git-svn | Jul 24, 2025 | Jul 10, 2025 | |
| Alpine Linux | alpine-linux-upgrade-git | Aug 8, 2025 | Jul 10, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-gitamazon-linux-ami-2-upgrade-git-allamazon-linux-ami-2-upgrade-git-coreamazon-linux-ami-2-upgrade-git-core-docamazon-linux-ami-2-upgrade-git-credential-libsecretamazon-linux-ami-2-upgrade-git-cvsamazon-linux-ami-2-upgrade-git-daemonamazon-linux-ami-2-upgrade-git-debuginfoamazon-linux-ami-2-upgrade-git-emailamazon-linux-ami-2-upgrade-git-guiamazon-linux-ami-2-upgrade-git-instawebamazon-linux-ami-2-upgrade-git-p4amazon-linux-ami-2-upgrade-git-subtreeamazon-linux-ami-2-upgrade-git-svnamazon-linux-ami-2-upgrade-gitkamazon-linux-ami-2-upgrade-gitwebamazon-linux-ami-2-upgrade-perl-gitamazon-linux-ami-2-upgrade-perl-git-svn | May 20, 2026 | May 20, 2026 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-gitamazon-linux-2023-upgrade-git-allamazon-linux-2023-upgrade-git-coreamazon-linux-2023-upgrade-git-core-debuginfoamazon-linux-2023-upgrade-git-core-docamazon-linux-2023-upgrade-git-credential-libsecretamazon-linux-2023-upgrade-git-credential-libsecret-debuginfoamazon-linux-2023-upgrade-git-cvsamazon-linux-2023-upgrade-git-daemonamazon-linux-2023-upgrade-git-daemon-debuginfoamazon-linux-2023-upgrade-git-debuginfoamazon-linux-2023-upgrade-git-debugsourceamazon-linux-2023-upgrade-git-emailamazon-linux-2023-upgrade-git-guiamazon-linux-2023-upgrade-git-instawebamazon-linux-2023-upgrade-gitkamazon-linux-2023-upgrade-git-p4amazon-linux-2023-upgrade-git-subtreeamazon-linux-2023-upgrade-git-svnamazon-linux-2023-upgrade-gitwebamazon-linux-2023-upgrade-perl-gitamazon-linux-2023-upgrade-perl-git-svn | Jul 30, 2025 | Jul 10, 2025 | |
| Debian | debian-upgrade-git | Jul 10, 2025 | Jul 10, 2025 | |
| Freebsd | freebsd-upgrade-package-gitfreebsd-upgrade-package-git-cvsfreebsd-upgrade-package-git-guifreebsd-upgrade-package-git-p4freebsd-upgrade-package-git-svn | Dec 10, 2025 | Jul 8, 2025 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-vcs-git | Jul 9, 2025 | Jul 8, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-githuawei-euleros-2_0_sp13-upgrade-git-corehuawei-euleros-2_0_sp13-upgrade-git-helphuawei-euleros-2_0_sp13-upgrade-perl-git | Oct 24, 2025 | Oct 23, 2025 | |
| Microsoft Visual_studio | microsoft-visual_studio_2017-upgrade-latest-ltsc_15_9microsoft-visual_studio_2019-upgrade-latest-ltsc_16_11microsoft-visual_studio_2022-upgrade-latest-ltsc_17_8microsoft-visual_studio_2022-upgrade-latest-ltsc_17_10microsoft-visual_studio_2022-upgrade-latest-ltsc_17_12microsoft-visual_studio_2022-upgrade-latest-current_channel | Jul 10, 2025 | Jul 8, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-gitoracle-linux-upgrade-git-alloracle-linux-upgrade-git-coreoracle-linux-upgrade-git-core-docoracle-linux-upgrade-git-credential-libsecretoracle-linux-upgrade-git-daemonoracle-linux-upgrade-git-emailoracle-linux-upgrade-git-guioracle-linux-upgrade-git-instaweboracle-linux-upgrade-gitkoracle-linux-upgrade-git-subtreeoracle-linux-upgrade-git-svnoracle-linux-upgrade-gitweboracle-linux-upgrade-perl-gitoracle-linux-upgrade-perl-git-svn | Jul 23, 2025 | Jul 10, 2025 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-gitredhat-upgrade-git-allredhat-upgrade-git-coreredhat-upgrade-git-core-debuginforedhat-upgrade-git-core-docredhat-upgrade-git-credential-libsecretredhat-upgrade-git-credential-libsecret-debuginforedhat-upgrade-git-daemonredhat-upgrade-git-daemon-debuginforedhat-upgrade-git-debuginforedhat-upgrade-git-debugsourceredhat-upgrade-git-emailredhat-upgrade-git-guiredhat-upgrade-git-instawebredhat-upgrade-git-subtreeredhat-upgrade-git-svnredhat-upgrade-gitkredhat-upgrade-gitwebredhat-upgrade-perl-gitredhat-upgrade-perl-git-svn | Jul 15, 2025 | Jul 10, 2025 | |
| Rocky_linux | rocky-upgrade-gitrocky-upgrade-git-corerocky-upgrade-git-core-debuginforocky-upgrade-git-credential-libsecretrocky-upgrade-git-credential-libsecret-debuginforocky-upgrade-git-daemonrocky-upgrade-git-daemon-debuginforocky-upgrade-git-debuginforocky-upgrade-git-debugsourcerocky-upgrade-git-subtree | Feb 5, 2026 | Jul 29, 2025 | |
| Suse | — | suse-upgrade-gitsuse-upgrade-git-archsuse-upgrade-git-coresuse-upgrade-git-credential-libsecretsuse-upgrade-git-cvssuse-upgrade-git-daemonsuse-upgrade-git-docsuse-upgrade-git-emailsuse-upgrade-git-guisuse-upgrade-git-lfssuse-upgrade-git-p4suse-upgrade-git-svnsuse-upgrade-git-websuse-upgrade-gitksuse-upgrade-perl-git | Dec 5, 2025 | Jul 22, 2025 |
| Ubuntu | ubuntu-pro-upgrade-gitubuntu-pro-upgrade-git-guiubuntu-pro-upgrade-gitkubuntu-upgrade-gitubuntu-upgrade-git-guiubuntu-upgrade-gitk | Jul 9, 2025 | Jul 8, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Aug 19, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub