7.1
High
CVE-2026-123532 gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC Probe
Description
gix-fs in gitoxide before 0.24.1 contains a credential disclosure vulnerability that allows remote attackers to capture NTLM credentials by supplying UNC symlink targets in a crafted repository. When a victim checks out the repository on Windows with symlinks enabled, gix_fs::symlink::create calls is_dir() on the UNC target, triggering SMB authentication that leaks the username, domain, and NTLMv2 hash.
CVSS 4.0 detail
Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:NExploitable remotely over the network, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Network
- Attack complexity
- Low
- Attack requirements
- None
- Privileges required
- None
- Interaction
- Passive
- Confidentiality
- High
- Integrity
- None
- Availability
- None
- Confidentiality of other systems
- None
- Integrity of other systems
- None
- Availability of other systems
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| gitoxide 0.24 | earliest → < 0.24.1 | 0.24.1 |
Other CVEs of gitoxide
The 18 CVEs of gitoxide →
CVE-2026-123533
Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File
6.8
Medium
CVE-2026-100419
gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that…
7.3
High
CVE-2026-91986
gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing…
5.3
Medium
CVE-2025-24890
gitoxide is an implementation of git written in Rust
6.8
Medium