gitoxide releases prior to 0.33.0 contain a flaw in the worktree state checkout logic; when core.symlinks is enabled, the library follows existing terminal symlinks in an incremental checkout. If a symlink points outside the intended worktree, a later normal file checkout at the same path will resolve through that symlink and write the file content to the external location, effectively allowing an attacker to overwrite files outside the repository. The vulnerability is rooted in incorrect handling of symlink resolution and is classified as CWE-59.

The vulnerability affects GitoxideLabs' gitoxide library for all versions before 0.33.0 when used on Windows. Applications and tools that embed gitoxide and rely on its checkout functionality are potentially impacted. No other operating systems are explicitly mentioned in the description.

The CVSS score of 6.0 indicates a moderate severity. Exploitability data is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local, inferred from the description that the flaw exists on Windows when the library performs a checkout and follows symlinks. An attacker would need the ability to influence the checkout process in Windows. No public exploits have been reported, so the risk remains primarily to systems that embed the vulnerable library and are exposed to untrusted data during a checkout operation.