A critical vulnerability in Git, CVE-2024-32002, allows remote code execution (RCE) through submodules, with PoC exploits already out; users urged to disable symbolic link support and avoid cloning from untrusted sources; Git has issued patches, emphasizing caution due to its widespread use in software development.
https://cybersecuritynews.com/poc-exploit-released-2/