Git versions from 2.38.0 up to but not including 2.50.1 contain a vulnerability where the client does not sufficiently validate advertised bundles during cloning. This allows a malicious remote server to perform protocol injection via the bundle-uri parameter, potentially causing arbitrary file writes to locations controlled by the attacker. The vulnerability can lead to arbitrary code execution in the worst case. The use of bundle URIs is disabled by default and can be controlled by configuration. Some attack scenarios require control over the clone destination or recursive cloning, which can be mitigated by disabling recursive clones. The issue is fixed in Git version 2.50.1 and later.