Changes since Git for Windows v2.51.2 (October 28th 2025)
This is a security fix release, addressing CVE-2025-66413.
- CVE-2025-66413, Git for Windows: When a user clones a repository from an attacker-controlled server, Git may attempt NTLM authentication and disclose the user's NTLMv2 hash to the remote server. Since NTLM hashing is weak, the captured hash can potentially be brute-forced to recover the user's credentials. This is addressed by disabling NTLM authentication by default.
| Filename | SHA-256 |
|---|---|
| MinGit-2.51.2.2-64-bit.zip | 3133d7ff6ffac9bef6e946226a4b4354b4d263c59b73cda320b03775589dd402 |
| MinGit-2.51.2.2-arm64.zip | bf19ff3d6b13d64f1876f02a2a891c38d88d8ac2466c8e49f347f3ead15a5106 |
| MinGit-2.51.2.2-32-bit.zip | 6856dd158f8c5cdc58ddc59436768851b78e49432a6d53c72a96af1e9ccc26c5 |
| MinGit-2.51.2.2-busybox-64-bit.zip | 790ad3fff8d9467de2b8e26a8157ebe571e920dbc80170bfc3038581de7a76dd |
| MinGit-2.51.2.2-busybox-32-bit.zip | 4ad53977a4f9d0087cfe97af1c7ae0dd2cdad86874f367a02d37319eb3cca2d9 |