Git for Windows CVE-2026-62960

Exploitation requires that the victim has explicitly set transfer.bundleuri=true in their Git configuration-this setting is disabled by default and must be manually enabled by the user or an administrator. The victim must perform a git clone or git fetch from an attacker-controlled or attacker-compromised remote Git server capable of advertising custom bundle URIs. The vulnerability is limited to Git for Windows; Linux and macOS Git clients are not affected. Exploitation is additionally constrained by the requirement for user interaction (the clone or fetch must be actively initiated) and by network egress policies: environments that block outbound SMB traffic on ports 445 and 139 to external hosts prevent NTLM exposure at the network layer even if the vulnerable code path executes.

The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N scores 7.4 High and accurately characterizes the threat: network-reachable, low attack complexity, no attacker privileges required, with a scope change because captured NTLM credentials can authenticate against Active Directory, file servers, and other Windows services far beyond the Git process itself. EPSS data was not supplied in the source intelligence, so exploitation probability cannot be quantified numerically. The absence of a CISA KEV listing and the lack of public exploit code reduce urgency relative to a fully weaponized issue. The primary mitigating factor is that transfer.bundleuri=true is non-default and must be explicitly enabled; organizations that have not set this option are entirely unexposed. The conceptual simplicity of the attack-operate a Git server, advertise a malicious URI, wait for a clone-means any team enabling bundleuri against untrusted or community-hosted remotes faces meaningful risk, particularly given how straightforwardly NTLM relay can escalate into lateral movement on Windows networks.

An attacker hosts a public or compromised Git repository and configures it to advertise a bundle URI pointing to an attacker-controlled SMB share (e.g., \\attacker-host\share\bundle.bundle). A developer running Git for Windows with transfer.bundleuri=true clones or fetches from that repository, causing Windows to automatically initiate an SMB connection and present NTLM credentials to the attacker's host. The attacker captures the NTLM hash for offline cracking or relays it in real time to authenticate against the victim organization's internal Windows services.