CVE-2025-66413

MEDIUM 6.5CVE-2025-66413 · Published 10/03/2026 · updated 17/06/2026

In short

CVE-2025-66413 is a MEDIUM (CVSS 6.5) vulnerability affecting git (gitforwindows).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 21.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
git gitforwindows	`≤ 2.53.0`	No fix yet

Description

Git for Windows is the Windows port of Git. Prior to 2.53.0(2), it is possible to obtain a user's NTLM hash by tricking them into cloning from a malicious server. Since NTLM hashing is weak, it is possible for the attacker to brute-force the user's account name and password. This vulnerability is fixed in 2.53.0(2).

References

git-for-windows/git release v2.53.0.windows.2 · Release Notes
git-for-windows/git security advisory · Exploit

More vulnerabilities in git

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free