An arbitrary code execution vulnerability (CVE-2025-41390) affects the git functionality of Truffle Security Co.'s TruffleHog version 3.90.2. A specially crafted malicious repository can trigger this flaw, allowing an attacker to execute arbitrary code. The vulnerability has a high severity score of 7.8 CVSS v3.1.