PT-2025-45838

Git LFS may write to arbitrary files via crafted symlinks in github.com/git-lfs/git-lfs...

Arbitrary Code Execution

github.com/git-lfs/git-lfs is vulnerable to Arbitrary Code Execution. The vulnerability is due to Go preferring the current directory when the name of a command run does not contain a directory separator, in the case of Windows. This can result in arbitrary code execution if Git LFS operates on a...