CVE-2025-27613 is a vulnerability in Gitk, a Tcl/Tk based Git history browser included with git-gui. Starting with version 1.7.0, if a user clones an untrusted repository and runs Gitk without additional arguments, files in the user's home directory for which the user has write permission can be created or truncated. This occurs if the 'Support per-file encoding' option was previously enabled in Gitk's Preferences, or if the 'Show origin of this line' feature is used, regardless of that setting. The vulnerability is fixed in versions 2.50.1 and later.