Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-x8he-nt8f-57fk
Vulnerability ID VCID-x8he-nt8f-57fk
Aliases CVE-2025-27613
Summary Multiple vulnerabilities have been discovered in Git, the worst of which could lead to arbitrary code execution.
Status Published
Exploitability 0.5
Weighted Severity 3.9
Risk 1.9
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-73 External Control of File Name or Path
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
System Score Found at
cvssv3 4.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27613.json
epss 0.00011 https://api.first.org/data/v1/epss?cve=CVE-2025-27613
epss 0.00011 https://api.first.org/data/v1/epss?cve=CVE-2025-27613
epss 0.00013 https://api.first.org/data/v1/epss?cve=CVE-2025-27613
epss 0.00013 https://api.first.org/data/v1/epss?cve=CVE-2025-27613
epss 0.00013 https://api.first.org/data/v1/epss?cve=CVE-2025-27613
epss 0.00013 https://api.first.org/data/v1/epss?cve=CVE-2025-27613
epss 0.00013 https://api.first.org/data/v1/epss?cve=CVE-2025-27613
epss 0.00013 https://api.first.org/data/v1/epss?cve=CVE-2025-27613
cvssv3.1 5.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 3.6 https://github.com/j6t/gitk/compare/465f03869ae11acd04abfa1b83c67879c867410c..026c397d911cde55924d7eb1311d0fd6e2e105d5
ssvc Track https://github.com/j6t/gitk/compare/465f03869ae11acd04abfa1b83c67879c867410c..026c397d911cde55924d7eb1311d0fd6e2e105d5
cvssv3.1 3.6 https://github.com/j6t/gitk/compare/7dd272eca153058da2e8d5b9960bbbf0b4f0cbaa..67a128b91e25978a15f9f7e194d81b441d603652
ssvc Track https://github.com/j6t/gitk/compare/7dd272eca153058da2e8d5b9960bbbf0b4f0cbaa..67a128b91e25978a15f9f7e194d81b441d603652
cvssv3.1 3.6 https://github.com/j6t/gitk/security/advisories/GHSA-f3cw-xrj3-wr2v
ssvc Track https://github.com/j6t/gitk/security/advisories/GHSA-f3cw-xrj3-wr2v
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27613.json
https://api.first.org/data/v1/epss?cve=CVE-2025-27613
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27613
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1108983 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1108983
2379124 https://bugzilla.redhat.com/show_bug.cgi?id=2379124
465f03869ae11acd04abfa1b83c67879c867410c..026c397d911cde55924d7eb1311d0fd6e2e105d5 https://github.com/j6t/gitk/compare/465f03869ae11acd04abfa1b83c67879c867410c..026c397d911cde55924d7eb1311d0fd6e2e105d5
7dd272eca153058da2e8d5b9960bbbf0b4f0cbaa..67a128b91e25978a15f9f7e194d81b441d603652 https://github.com/j6t/gitk/compare/7dd272eca153058da2e8d5b9960bbbf0b4f0cbaa..67a128b91e25978a15f9f7e194d81b441d603652
GHSA-f3cw-xrj3-wr2v https://github.com/j6t/gitk/security/advisories/GHSA-f3cw-xrj3-wr2v
GLSA-202507-09 https://security.gentoo.org/glsa/202507-09
RHSA-2025:11462 https://access.redhat.com/errata/RHSA-2025:11462
RHSA-2025:11533 https://access.redhat.com/errata/RHSA-2025:11533
RHSA-2025:11534 https://access.redhat.com/errata/RHSA-2025:11534
USN-7626-1 https://usn.ubuntu.com/7626-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27613.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N Found at https://github.com/j6t/gitk/compare/465f03869ae11acd04abfa1b83c67879c867410c..026c397d911cde55924d7eb1311d0fd6e2e105d5
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-10T15:55:29Z/ Found at https://github.com/j6t/gitk/compare/465f03869ae11acd04abfa1b83c67879c867410c..026c397d911cde55924d7eb1311d0fd6e2e105d5
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N Found at https://github.com/j6t/gitk/compare/7dd272eca153058da2e8d5b9960bbbf0b4f0cbaa..67a128b91e25978a15f9f7e194d81b441d603652
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-10T15:55:29Z/ Found at https://github.com/j6t/gitk/compare/7dd272eca153058da2e8d5b9960bbbf0b4f0cbaa..67a128b91e25978a15f9f7e194d81b441d603652
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N Found at https://github.com/j6t/gitk/security/advisories/GHSA-f3cw-xrj3-wr2v
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-10T15:55:29Z/ Found at https://github.com/j6t/gitk/security/advisories/GHSA-f3cw-xrj3-wr2v
Exploit Prediction Scoring System (EPSS)
Percentile 0.0144
EPSS Score 0.00011
Published At April 2, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:04:36.464053+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/202507-09 38.0.0