CVE-2024-40644

CVE-2024-40644 affects gitoxide's gix-path component, specifically on Windows systems, where it can be tricked into executing a malicious git.exe from an untrusted location. The vulnerability is rated Medium (CVSS 6.8) due to its potential for privilege escalation and code execution, primarily on 32-bit Windows systems where a limited user can create a specific directory to house the malicious executable. While the attack requires user interaction and a specific system configuration (git not in PATH), it could lead to high impact on confidentiality and integrity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.