Arbitrary Code Execution Vulnerability in TruffleHog by Truffle Security Co.

CVE-2025-41390

What is CVE-2025-41390?

An arbitrary code execution vulnerability affects TruffleHog 3.90.2 by Truffle Security Co. This vulnerability is exploited when an attacker provides a specially crafted repository that can execute arbitrary code upon processing. It poses a significant risk to users who may inadvertently interact with compromised repositories. Users are advised to apply necessary security measures and updates to mitigate potential exploitation.

References