Git Fixes 6 Security Vulnerabilities Allowing Hackers to Execute Malicious Code Through Cloned Repositories

Six security vulnerabilities in Git, the world's most widely used version control system, exposed developers and organizations to malicious code execution simply by cloning a repository. The most critical flaw (CVE-2026-111760) exploited an integer truncation in path handling during recursive clones, allowing an attacker to embed a weaponized repository that executes arbitrary code on the victim's machine. Because Git is embedded in virtually every software development pipeline, CI/CD system, and developer workstation, unpatched installations represent an enormous and often overlooked attack surface. This incident underscores the importance of treating foundational developer tooling with the same urgency as production infrastructure when vulnerabilities are disclosed.