Bypass of safe.directory protections in Git

7.8 CVSS

Vulnerability Description

Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsuspecting user could still be affected by the issue reported in CVE-2022-24765, for example when navigating as root into a shared tmp directory that is owned by them, but where an attacker could create a git repository. Versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5 contain a patch for this issue. The simplest way to avoid being affected by the exploit described in the example is to avoid running git as root (or an Administrator in Windows), and if needed to reduce its use to a minimum. While a generic workaround is not possible, a system could be hardened from the exploit described in the example by removing any such repository if it exists already and creating one as root to block any future attacks.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-29187

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from git

View All →

CVE-2025-48386

Git allows a buffer overflow in 'wincred' credential helper

Medium 6.3

CVE-2025-48385

Git alllows arbitrary file writes via bundle-uri parameter injection

High 8.6

CVE-2025-48384

Git allows arbitrary code execution through broken config quoting

High 8.1

CVE-2024-52006

Newline confusion in credential helpers can lead to credential exfiltration in git

Low 2.1

CVE-2024-52005

The sideband payload is passed unfiltered to the terminal in git

High 7.5

Affected Vendor

git

View all reports →

Affected Software

git

Vulnerable Versions:

>= 2.30.3, < 2.30.5, >= 2.31.2, < 2.31.4, >= 2.32.1, < 2.32.3, >= 2.33.2, < 2.33.4, >= 2.34.2, < 2.34.4, >= 2.35.2, < 2.35.4, >= 2.36, < 2.36.2, >= 2.37, < 2.37.1