CVE-2025-26625

一、漏洞信息
 漏洞编号：[CVE-2025-26625](https://nvd.nist.gov/vuln/detail/CVE-2025-26625)
 漏洞归属组件：[git-lfs](https://gitee.com/src-openeuler/git-lfs)
 漏洞归属的版本：2.12.0,3.2.0,3.5.1,3.6.1
 CVSS V3.0分值：
  BaseScore：N/A None
  Vector：CVSS：3.0/
 漏洞简述：
  Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository s working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links exist which collide with the paths of files tracked by Git LFS. The git lfs checkout and git lfs pull commands do not check for symbolic links before writing to files in the working tree, allowing an attacker to craft a repository containing symbolic or hard links that cause Git LFS to write to arbitrary file system locations accessible to the user running these commands. As well, when the git lfs checkout and git lfs pull commands are run in a bare repository, they could write to files visible outside the repository. The vulnerability is fixed in version 3.7.1. As a workaround, support for symlinks in Git may be disabled by setting the core.symlinks configuration option to false, after which further clones and fetches will not create symbolic links. However, any symbolic or hard links in existing repositories will still provide the opportunity for Git LFS to write to their targets.
 漏洞公开时间：2025-10-18 00:15:37
 漏洞创建时间：2025-10-17 14:01:19
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-26625
<details>
<summary>更多参考(点击展开)</summary>

无
</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  七彩瞬析开源风险感知平台
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

无
</details>

二、漏洞分析结构反馈
 影响性分析说明：
      When populating a Git repository s working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links exist which collide with the paths of files tracked by Git LFS.  
 openEuler评分：
  8.8
 Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
 受影响版本排查(受影响/不受影响)：
  1.master(3.7.0):受影响
2.openEuler-22.03-LTS-SP4(3.5.1):受影响
3.openEuler-24.03-LTS(3.2.0):受影响
4.openEuler-24.03-LTS-Next(3.6.1):受影响
5.openEuler-24.03-LTS-SP1(3.6.1):受影响
6.openEuler-24.03-LTS-SP2(3.6.1):受影响
7.openEuler-20.03-LTS-SP4:不受影响
8.openEuler-22.03-LTS-SP3:不受影响

修复是否涉及abi变化(是/否)：
  1.master(3.7.0):否
2.openEuler-20.03-LTS-SP4:否
3.openEuler-22.03-LTS-SP3:否
4.openEuler-22.03-LTS-SP4(3.5.1):否
5.openEuler-24.03-LTS(3.2.0):否
6.openEuler-24.03-LTS-Next(3.6.1):否
7.openEuler-24.03-LTS-SP1(3.6.1):否
8.openEuler-24.03-LTS-SP2(3.6.1):否

原因说明：
  1.master(3.7.0):正常修复
2.openEuler-22.03-LTS-SP4(3.5.1):暂不修复-暂无解决方案或补丁
3.openEuler-24.03-LTS(3.2.0):暂不修复-暂无解决方案或补丁
4.openEuler-24.03-LTS-Next(3.6.1):暂不修复-暂无解决方案或补丁
5.openEuler-24.03-LTS-SP1(3.6.1):暂不修复-暂无解决方案或补丁
6.openEuler-24.03-LTS-SP2(3.6.1):暂不修复-暂无解决方案或补丁
7.openEuler-20.03-LTS-SP4:不受影响-组件不存在
8.openEuler-22.03-LTS-SP3:不受影响-组件不存在

src-openEuler/git-lfs

内容风险标识

评论 (6)

src-openEuler/git-lfs .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2025-26625

评论 (6)

搜索帮助

src-openEuler/git-lfs