CVE-2025-66413
Git for Windows is the Windows port of Git. Prior to 2.53.0(2), it is possible to obtain a user's NTLM hash by tricking them into cloning from a malicious server. Since NTLM hashing is weak, it is possible for the attacker to brute-force the user's account name and password. This vulnerability is fixed in 2.53.0(2).
Vendor
-
Product
-
CWE
Yayın Tarihi
2026-03-10 21:16:40
Güncelleme
2026-03-11 13:52:47
Source Identifier
security-advisories@github.com
KEV Date Added
-