Insecure Temporary File Exposure in Bash Git Prompt by MagicMonty

CVE-2025-61659

What is CVE-2025-61659?

The Bash Git Prompt versions 2.6.1 to 2.7.1 contain a vulnerability due to the insecure handling of temporary files. Specifically, the application creates a temporary file in the /tmp directory using a predictable naming convention. This predictable filename could be leveraged by an attacker to access sensitive information from the file, leading to potential unauthorized access and data exposure. Users of affected versions are encouraged to review their configurations and apply mitigations as necessary to secure their systems.

References