CVE-2025-24890

A flaw was found in gix-sec. On Windows, an elevated administrator running a program that uses gix-sec may incorrectly trust repositories controlled by another user. This bypasses security protections, allowing repository configurations or hooks to execute commands with the administrator's privileges. This can lead to arbitrary code execution or privilege escalation.

This flaw affects the gix-sec crate on Windows systems, leading to privilege escalation. Red Hat products are not affected as the vulnerable code is not present in Red Hat's supported Linux-based offerings.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.