CVE-2025-27614

EUVD-2025-21004

10.07.2025, 15:15

Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social engineering a user who has cloned the repository can be tricked into running any script (e.g., Bourne shell, Perl, Python, ...) supplied by the attacker by invoking gitk filename, where filename has a particular structure. The script is run with the privileges of the user. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.

OS Command Injection

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.6 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 8%

Debian Releases

Debian Product

Codename

git

bookworm	1:2.39.5-0+deb12u3 fixed
bookworm (security)	1:2.39.5-0+deb12u2 fixed
bullseye	1:2.30.2-1+deb11u2 fixed
bullseye (security)	1:2.30.2-1+deb11u5 fixed
forky	1:2.53.0-1 fixed
sid	1:2.53.0-1 fixed
trixie	1:2.47.3-0+deb13u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

git

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	Fixed 1:2.43.0-1ubuntu7.3 released
oracular	Fixed 1:2.45.2-1ubuntu1.2 released
plucky	Fixed 1:2.48.1-0ubuntu1.1 released
xenial	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

git

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-arch

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-core

suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed

git-cvs

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-daemon

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-doc

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-email

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-gui

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-lfs

suse enterprise desktop 15 SP6	3.7.0-150600.13.3.1 fixed
suse enterprise desktop 15 SP7	3.7.0-150600.13.3.1 fixed
suse enterprise sap 15 SP6	3.7.0-150600.13.3.1 fixed
suse enterprise sap 15 SP7	3.7.0-150600.13.3.1 fixed
suse enterprise server 15 SP6	3.7.0-150600.13.3.1 fixed
suse enterprise server 15 SP7	3.7.0-150600.13.3.1 fixed

git-svn

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

git-web

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

gitk

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

perl-Git

suse enterprise desktop 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise desktop 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise sap 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise sap 15 SP7	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP3	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP4	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP5	2.43.7-150300.10.51.1 fixed
suse enterprise server 15 SP6	2.51.0-150600.3.12.1 fixed
suse enterprise server 15 SP7	2.51.0-150600.3.12.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

git

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-all

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-core

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-core-doc

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-credential-libsecret

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-daemon

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-email

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-gui

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-instaweb

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-subtree

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

git-svn

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

gitk

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

gitweb

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

perl-Git

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

perl-Git-SVN

RHEL 8	0:2.43.7-1.el8_10 fixed
RHEL 9	0:2.47.3-1.el9_6 fixed

Common Weakness Enumeration

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References

https://github.com/j6t/gitk/commit/8e3070aa5e331be45d4d03e3be41f84494fce129

https://github.com/j6t/gitk/security/advisories/GHSA-g4v5-fjv9-mhhc

http://www.openwall.com/lists/oss-security/2025/07/08/4