CVE-2025-66413: Git for Windows leaks NTLM hash when cloning from an attacker-controlled server
Git for Windows is the Windows port of Git. Prior to 2.53.0(2), it is possible to obtain a user's NTLM hash by tricking them into cloning from a malicious server. Since NTLM hashing is weak, it is possible for the attacker to brute-force the user's account name and password. This vulnerability is fixed in 2.53.0(2).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-66413?
CVE-2025-66413 is considered a high severity vulnerability due to the potential exposure of NTLM hashes from users.
How do I fix CVE-2025-66413?
To fix CVE-2025-66413, users should upgrade to Git for Windows version 2.53.0(2) or later.
What is the risk associated with CVE-2025-66413?
The risk associated with CVE-2025-66413 is that attackers can exploit the vulnerability to capture NTLM hashes, compromising user credentials.
Which versions of Git for Windows are affected by CVE-2025-66413?
Git for Windows versions prior to 2.53.0(2) are affected by CVE-2025-66413.
How can an attacker exploit CVE-2025-66413?
An attacker can exploit CVE-2025-66413 by tricking users into cloning a repository from a malicious server.