The gix-path library incorrectly treats local Git repository configuration as system-wide configuration under certain conditions, leading to potential leakage of sensitive information such as credentials between repositories. This occurs when higher scoped configuration files are missing or deliberately disabled, causing local configuration to be misinterpreted as installation-level configuration. This can result in credentials intended for one repository being sent to another during operations like cloning. The issue is fixed in version 0.10.10.