Security Advisory

CVE-2025-66413

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-03-10 20:34:32

Last updated 2026-03-11 14:33:36

Assigner GitHub_M

CVSS score 7.4

State PUBLISHED

Description

Git for Windows is the Windows port of Git. Prior to 2.53.0(2), it is possible to obtain a user's NTLM hash by tricking them into cloning from a malicious server. Since NTLM hashing is weak, it is possible for the attacker to brute-force the user's account name and password. This vulnerability is fixed in 2.53.0(2).

← Browse all CVEs View on cve.org ↗