David Leadbeater personal blog
Breaking Git with a carriage return and cloning RCE
tl;dr: On Unix-like platforms, if you use git clone --recursive on an untrusted repo, it could achieve remote code execution. Update to a fixed version of Git and other software that embeds Git (including GitHub Desktop).
- Points
- 373
- HN comments
- 162
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacySoftware Engineering2025
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Jul 8, 2025 | Breaking Git with a carriage return and cloning RCE by dgl | 373 | 162 |
