CVE-2022-31012

Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into `C:\mingw64\bin\git.exe` by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is included in version 2.37.1. Two workarounds are available. Create the `C:\mingw64` folder and remove read/write access from this folder, or disallow arbitrary authenticated users to create folders in `C:\`.

• CWE-426

• https://github.com/git-for-windows/git/releases/tag/v2.37.1.windows.1Release Notes, Third Party Advisory
• https://github.com/git-for-windows/git/security/advisories/GHSA-gjrj-fxvp-hjj2Mitigation, Third Party Advisory
• https://github.com/git-for-windows/git/releases/tag/v2.37.1.windows.1Release Notes, Third Party Advisory
• https://github.com/git-for-windows/git/security/advisories/GHSA-gjrj-fxvp-hjj2Mitigation, Third Party Advisory

Published

Jul 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31006indy-node is the server portion of Hyperledger Indy, a distr…7.5
• CVE-2022-31007eLabFTW is an electronic lab notebook manager for research t…7.2
• CVE-2022-31008RabbitMQ is a multi-protocol messaging and streaming broker.…7.5
• CVE-2022-31009wire-ios is an iOS client for the Wire secure messaging appl…6.5
• CVE-2022-3101A flaw was found in tripleo-ansible. Due to an insecure defa…5.5
• CVE-2022-31011TiDB is an open-source NewSQL database that supports Hybrid …7.8
• CVE-2022-31013Chat Server is the chat server for Vartalap, an open-source …9.8
• CVE-2022-31014Nextcloud server is an open source personal cloud server. Af…3.5
• CVE-2022-31015Waitress is a Web Server Gateway Interface server for Python…5.9
• CVE-2022-31016Argo CD is a declarative continuous deployment for Kubernete…6.5
• CVE-2022-31017Zulip is an open-source team collaboration tool. Versions 2.…2.6
• CVE-2022-31018Play Framework is a web framework for Java and Scala. A deni…7.5