Vulnerabilities > GIT Large File Storage Project > GIT Large File Storage > 2.13.2

DATE CVE VULNERABILITY TITLE RISK
2022-04-20 CVE-2022-24826 Untrusted Search Path vulnerability in GIT Large File Storage Project GIT Large File Storage
On Windows, if Git LFS operates on a malicious repository with a `..exe` file as well as a file named `git.exe`, and `git.exe` is not found in `PATH`, the `..exe` program will be executed, permitting the attacker to execute arbitrary code.
7.8