Just a moment...

According to CISA, the US cybersecurity agency, a recent vulnerability in Git has been exploited in attacks and urged federal agencies to patch it immediately. The flaw is tracked as CVE-2025-48384 (CVSS 8.1) and is described as an arbitrary file write during the cloning of repositories with submodules that use a recursive flag. It affects macOS and Linux systems, with Windows machines deemed immune due to differences in control character usage.

Datadog warned that PoC code targeting the bug had been released and that attackers can craft a malicious .gitmodules file to redirect submodule contents, potentially enabling remote code execution. Git fixed the issue in versions 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1 and 2.50.1, and CISA added CVE-2025-48384 to its Known Exploited Vulnerabilities list, urging patching by September 15 under BOD 22-01, with all organisations advised to review the KEV list and apply patches and mitigations.