Vulnerability in Git

CVE-2025-48385

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When cloning a repository Git knows to optionally fetch a bundle adverti…

EPSS: 0.008 (51.5th percentile) — read the EPSS interpretation.

Affected products

  • Git — versions < 2.43.7, >= 2.44.0-rc0, < 2.44.4, >= 2.45.0-rc0, < 2.45.4

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2025-48385?
CVE-2025-48385 is a vulnerability in Git, classified under External Control of File Name or Path. Published 2025-07-08.
Is CVE-2025-48385 known to be exploited?
7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.