What happened
RCE in Git via git clone exploiting symlink handling to write hooks on case-insensitive filesystems.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
SploitusRCE in Git via git clone exploiting symlink handling to write hooks on case-insensitive filesystems.KitPloit2026-09-22T03:33:13Candidatekitploit.comRCE in Git via git clone exploiting symlink handling to write hooks on case-insensitive filesystems.ru2026-09-22T03:33:13CandidatePoC-in-GitHub · markuta/CVE-2024-32002A proof of concept for the git vulnerability CVE-2024-32002★ 2markuta2024-05-17CandidatePoC-in-GitHub · markuta/hookyA submodule for exploiting CVE-2024-32002 vulnerability.★ 0markuta2024-05-17CandidatePoC-in-GitHub · amalmurali47/git_rceExploit PoC for CVE-2024-32002★ 533amalmurali472024-05-17CandidatePoC-in-GitHub · amalmurali47/hookHook for the PoC for exploiting CVE-2024-32002★ 18amalmurali472024-05-17CandidatePoC-in-GitHub · M507/CVE-2024-32002local poc for CVE-2024-32002★ 10M5072024-05-18CandidatePoC-in-GitHub · jakob-pennington/cve-2024-32002-submodule-rce★ 0jakob-pennington2024-05-18CandidatePoC-in-GitHub · jakob-pennington/cve-2024-32002-poc-rce★ 1jakob-pennington2024-05-18CandidatePoC-in-GitHub · safebuffer/CVE-2024-32002CVE-2024-32002 RCE PoC★ 108safebuffer2024-05-18CandidatePoC-in-GitHub · 10cks/CVE-2024-32002-POC★ 010cks2024-05-19CandidatePoC-in-GitHub · 10cks/CVE-2024-32002-hulk★ 010cks2024-05-19CandidatePoC-in-GitHub · 10cks/CVE-2024-32002-submod★ 010cks2024-05-19CandidatePoC-in-GitHub · 10cks/CVE-2024-32002-linux-hulk★ 010cks2024-05-19CandidatePoC-in-GitHub · 10cks/CVE-2024-32002-linux-submod★ 010cks2024-05-19CandidatePoC-in-GitHub · aitorcastel/poc_CVE-2024-32002★ 0aitorcastel2024-05-19CandidatePoC-in-GitHub · aitorcastel/poc_CVE-2024-32002_submodule★ 0aitorcastel2024-05-19CandidatePoC-in-GitHub · 10cks/hookCVE-2024-32002-hook★ 110cks2024-05-20CandidatePoC-in-GitHub · jweny/CVE-2024-32002_HOOK★ 3jweny2024-05-20CandidatePoC-in-GitHub · jweny/CVE-2024-32002_EXP★ 3jweny2024-05-20CandidatePoC-in-GitHub · CrackerCat/CVE-2024-32002_EXP★ 1CrackerCat2024-05-20CandidatePoC-in-GitHub · Roronoawjd/hookCVE-2024-32002 hook POC★ 0Roronoawjd2024-05-21CandidatePoC-in-GitHub · Roronoawjd/git_rceCVE-2024-32002 POC★ 0Roronoawjd2024-05-21CandidatePoC-in-GitHub · YukaFake/CVE-2024-32002-Reverse-ShellEste script demuestra cómo explotar la vulnerabilidad CVE-2024-32002 para obtener una reverse shell, proporcionando acceso remoto al sistema afectado. Úselo con precaución en entornos controlados y solo con fines educativos o de pruebas de seguridad.★ 6YukaFake2024-05-21CandidatePoC-in-GitHub · 1mxml/CVE-2024-32002-poc★ 01mxml2024-05-22CandidatePoC-in-GitHub · bfengj/CVE-2024-32002-hook★ 0bfengj2024-05-22CandidatePoC-in-GitHub · bfengj/CVE-2024-32002-Exploit★ 2bfengj2024-05-22CandidatePoC-in-GitHub · vincepsh/CVE-2024-32002Repo for testing CVE-2024-32002★ 0vincepsh2024-05-22CandidatePoC-in-GitHub · vincepsh/CVE-2024-32002-hookCVE-2024-32002-hook★ 0vincepsh2024-05-22CandidatePoC-in-GitHub · YukaFake/CVE-2024-32002This is the main repository for CVE 2024-32002, and requires recursive cloning because it contains the submodels necessary for execution.★ 0YukaFake2024-05-22CandidatePoC-in-GitHub · 10cks/CVE-2024-32002-EXP★ 210cks2024-05-23CandidatePoC-in-GitHub · WOOOOONG/CVE-2024-32002PoC Exploit for CVE-2024-32002★ 0WOOOOONG2024-05-23CandidatePoC-in-GitHub · WOOOOONG/hookPoC Exploit for CVE-2024-32002★ 0WOOOOONG2024-05-23CandidatePoC-in-GitHub · fadhilthomas/poc-cve-2024-32002poc of git rce using cve-2024-32002★ 1fadhilthomas2024-05-23CandidatePoC-in-GitHub · fadhilthomas/hookpart of poc cve-2024-32002★ 0fadhilthomas2024-05-24CandidatePoC-in-GitHub · jakob-pennington/cve-2024-32002-submodule-awA submodule to demonstrate CVE-2024-32002. Demonstrates arbitrary write into .git.★ 0jakob-pennington2024-05-25CandidatePoC-in-GitHub · jakob-pennington/cve-2024-32002-poc-awA POC for CVE-2024-32002 demonstrating arbitrary write into the .git directory.★ 0jakob-pennington2024-05-25CandidatePoC-in-GitHub · Goplush/CVE-2024-32002-git-rce★ 1Goplush2024-05-28CandidatePoC-in-GitHub · 431m/rcetestCVE-2024-32002 poc test★ 0431m2024-05-30CandidatePoC-in-GitHub · AD-Appledog/CVE-2024-32002CVE-2024-32002wakuwaku★ 0AD-Appledog2024-05-31CandidatePoC-in-GitHub · AD-Appledog/wakuwakucve-2024-32002yahhh★ 0AD-Appledog2024-05-31CandidatePoC-in-GitHub · tobelight/cve_2024_32002https://www.cve.org/CVERecord?id=CVE-2024-32002★ 0tobelight2024-06-01CandidatePoC-in-GitHub · sysonlai/CVE-2024-32002-hook★ 0sysonlai2024-07-07CandidatePoC-in-GitHub · TSY244/CVE-2024-32002-git-rce-father-poc★ 0TSY2442024-07-20CandidatePoC-in-GitHub · TSY244/CVE-2024-32002-git-rce★ 0TSY2442024-07-20CandidatePoC-in-GitHub · blackninja23/CVE-2024-32002★ 0blackninja232024-07-27CandidatePoC-in-GitHub · daemon-reconfig/CVE-2024-32002A Reverse shell generator for gitlab-shell vulnerability cve 2024-32002★ 0daemon-reconfig2024-07-28CandidatePoC-in-GitHub · charlesgargasson/CVE-2024-32002GIT RCE CVE-2024-32002★ 0charlesgargasson2024-07-29CandidatePoC-in-GitHub · NishanthAnand21/CVE-2024-32002-PoCPoC of CVE-2024-32002 - Remote Code Execution while cloning special-crafted local repositories★ 3NishanthAnand212024-07-30CandidatePoC-in-GitHub · FlojBoj/CVE-2024-32002★ 0FlojBoj2024-07-30CandidatePoC-in-GitHub · SpycioKon/CVE-2024-32002Just small script to exploit CVE-2024-32002★ 0SpycioKon2024-07-30CandidatePoC-in-GitHub · chrisWalker11/running-CVE-2024-32002-locally-for-tesingadapting CVE-2024-32002 for running offline and locally★ 0chrisWalker112024-08-02CandidatePoC-in-GitHub · sanan2004/CVE-2024-32002POC★ 0sanan20042024-08-17CandidatePoC-in-GitHub · Masamuneee/hookThis is a demo for CVE-2024-32002 POC★ 0Masamuneee2024-09-27CandidatePoC-in-GitHub · Masamuneee/CVE-2024-32002-POCPoC for CVE-2024-32002: RCE via malicious git submodule hooks on case-insensitive filesystems★ 0Masamuneee2024-09-27CandidatePoC-in-GitHub · th4s1s/CVE-2024-32002-PoCProof of Concept for CVE-2024-32002★ 1th4s1s2024-09-27CandidatePoC-in-GitHub · grecosamuel/CVE-2024-32002★ 1grecosamuel2024-10-22CandidatePoC-in-GitHub · BohemianHacks/CVE-2024-32002-pocCVE-2024-32002 是 Git 中的一个严重漏洞,允许攻击者在用户执行 git clone 操作时远程执行任意代码(RCE)。★ 1BohemianHacks2024-11-23CandidatePoC-in-GitHub · ashutosh0408/CVE-2024-32002This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on case-insensitive filesystems to write files into the .git/ directory, leading to the execution of malicious hooks.★ 0ashutosh04082025-03-06CandidatePoC-in-GitHub · ashutosh0408/Cve-2024-32002-pocThis repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on case-insensitive filesystems to write files into the .git/ directory, leading to the execution of malicious hooks.★ 0ashutosh04082025-03-06CandidatePoC-in-GitHub · Dre4m017/fuzzycve-2024-32002★ 0Dre4m0172025-07-22CandidatePoC-in-GitHub · JoaoLeonello/cve-2024-32002-pocProof of Concept for CVE-2024-32002: Git submodule path injection vulnerability.★ 0JoaoLeonello2025-09-24CandidatePoC-in-GitHub · srakkk/cve-2024-32002-demo★ 0srakkk2025-10-23CandidatePoC-in-GitHub · srakkk/cve-2024-32002-hook★ 0srakkk2025-10-23CandidatePoC-in-GitHub · ControlO8/CVE-2024-32002CVE-2024-32002 Private for Capstone Project CC10★ 0ControlO82026-03-12CandidatePoC-in-GitHub · ControlO8/CVE-2024-32002-hookhook repo for cve-2024-32002★ 0ControlO82026-03-12CandidateSploitusTools repository for CVE-2024-32002 hook with no README file available.KitPloit2026-10-07T04:21:37Candidatekitploit.comTools repository for CVE-2024-32002 hook with no README file available.ja2026-10-07T04:21:37CandidateSploitusArbitrary code execution in Git via malicious symlink and submodule post-checkout hook.KitPloit2026-10-20T18:36:19Candidatekitploit.comArbitrary code execution in Git via malicious symlink and submodule post-checkout hook.en2026-10-20T18:36:19CandidateSource timeline
Discovered through SploitusView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.