bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name.
History

Tue, 30 Sep 2025 09:00:00 +0000

Type Values Removed Values Added
First Time appeared Bash-git-prompt Project
Bash-git-prompt Project bash-git-prompt
Vendors & Products Bash-git-prompt Project
Bash-git-prompt Project bash-git-prompt

Mon, 29 Sep 2025 17:00:00 +0000

Type Values Removed Values Added
Description bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name.
Weaknesses CWE-377
References
Metrics cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L'}


cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-09-29T00:00:00.000Z

Updated: 2025-09-29T16:49:49.733Z

Reserved: 2025-09-29T00:00:00.000Z

Link: CVE-2025-61659

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-29T17:15:32.737

Modified: 2025-09-29T19:34:10.030

Link: CVE-2025-61659

cve-icon Redhat

No data.