Back to today’s briefing

Story perspectives

Critical Git Vulnerabilities Expose Credentials: Update Now!

1/28/2025

23 4

Summary

Story summary

Critical vulnerabilities in Git and its credential helpers, uncovered by researcher RyotaK, pose a serious threat of credential leaks via 'Clone2Leak' attacks. Flaws in GitHub Desktop, Git LFS, and GitHub CLI enable attackers to exploit faulty authentication request parsing. Users are strongly advised to update their tools immediately to safeguard their credentials.

1 of 1

Story summary

Critical vulnerabilities in Git and its credential helpers, uncovered by researcher RyotaK, pose a serious threat of credential leaks via 'Clone2Leak' attacks. Flaws in GitHub Desktop, Git LFS, and GitHub CLI enable attackers to exploit faulty authentication request parsing. Users are strongly advised to update their tools immediately to safeguard their credentials.