CVE-2025-46835HIGH 8.5EPSS p21.1%

CVE-2025-46835CVE-2025-46835

Description

Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permission. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

Scoring

CVSS 3.18.5 (HIGH)
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
EPSS0.30% probability of exploitation · percentile 21.1% · 2026-06-19T12:03:05Z
Published2025-07-10
Last modified2026-04-15

Underlying weaknesses· 1

CWE-88

References

  1. https://github.com/j6t/git-gui/compare/dcda716dbc9c90bcac4611bd1076747671ee0906..a437f5bc93330a70b42a230e52f3bd036ca1b1da
  2. https://github.com/j6t/git-gui/security/advisories/GHSA-xfx7-68v4-v8fg
  3. http://www.openwall.com/lists/oss-security/2025/07/08/4
  4. https://lists.debian.org/debian-lts-announce/2025/10/msg00003.html

1

TypeTargetConfidenceTier
WeaknessImproper Neutralization of Argument Delimiters in a Command ('Argument Injection')cwe-880%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-46334
CVE
CVE-2025-27614
CVE
Git Link Following Vulnerability
CVE
CVE-2025-26625
CVE
CVE-2025-68145
CVE
CVE-2026-20897
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.