CVE-2025-61659

bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name.

Score

CVSS 3.1 6.8 Medium

Status

Deferred - cve@mitre.org

Published

2025-09-29

Last modified

2026-10-09

Weaknesses

CWE-377

Affected products

• Bash-git-prompt (Magicmonty)

References

• https://github.com/magicmonty/bash-git-prompt/issues/561