A Vulnerability in Git Could Allow for Remote Code Execution

This report describes CVE-2025-48384, a Git vulnerability where malicious .gitmodules entries ending with a carriage return can be used to redirect submodule contents and, in some repository layouts or when combined with symlinks, achieve arbitrary filesystem writes. An attacker who exploits this could write a malicious Git hook that triggers remote code execution when users run commands like git commit or git merge; the report does not provide evidence of active exploitation.