vulnerability
Red Hat: CVE-2025-46835: git: Git GUI can create and overwrite files for which the user has write permission (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:N/AC:H/Au:N/C:N/I:P/A:N) | Jul 10, 2025 | Jul 15, 2025 | Jun 17, 2026 |
Severity
3
CVSS
(AV:N/AC:H/Au:N/C:N/I:P/A:N)
Published
Jul 10, 2025
Added
Jul 15, 2025
Modified
Jun 17, 2026
Description
Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permission. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.
Solutions
redhat-upgrade-gitredhat-upgrade-git-allredhat-upgrade-git-coreredhat-upgrade-git-core-debuginforedhat-upgrade-git-core-docredhat-upgrade-git-credential-libsecretredhat-upgrade-git-credential-libsecret-debuginforedhat-upgrade-git-daemonredhat-upgrade-git-daemon-debuginforedhat-upgrade-git-debuginforedhat-upgrade-git-debugsourceredhat-upgrade-git-emailredhat-upgrade-git-guiredhat-upgrade-git-instawebredhat-upgrade-git-subtreeredhat-upgrade-git-svnredhat-upgrade-gitkredhat-upgrade-gitwebredhat-upgrade-perl-gitredhat-upgrade-perl-git-svn
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.