Security Advisory

CVE-2025-41390

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-20 14:15:29
Last updated 2025-11-03 17:44:44
Assigner talos
State PUBLISHED

Description

An arbitrary code execution vulnerability exists in the git functionality of Truffle Security Co. TruffleHog 3.90.2. A specially crafted repository can lead to a arbitrary code execution. An attacker can provide a malicious respository to trigger this vulnerability.