> Yeah, but a script that intentionally invokes /usr/bin/git has already achieved the non-privileged access the git vulnerability could provide. Or, in Old New

> Yeah, but a script that intentionally invokes /usr/bin/git has already achieved the non-privileged access the git vulnerability could provide. Or, in Old New Thing terms, "it rather involved being on the other side of this airtight hatchway". https://blogs.msdn.microsoft.com/oldnewthing/20140529-00/?p=863 https://blogs.msdn.microsoft.com/oldnewthing/20140529-00/?p=...