This is an older version. The current version is 2.56.0.3. Git 2.56.0.3 · Released:
Installer files 2.53.0.3
| Architecture | Type | Scope | File size | Download | SHA256 |
|---|---|---|---|---|---|
| 64-bit | EXE (Inno Setup) | Current user | — | github.com | VirusTotal |
| 64-bit | EXE (Inno Setup) | All users | — | github.com | VirusTotal |
| ARM64 | EXE (Inno Setup) | Current user | — | github.com | VirusTotal |
| ARM64 | EXE (Inno Setup) | All users | — | github.com | VirusTotal |
Link and SHA256 come from the Windows Package Manager community manifest. Compare the hash of the downloaded file before running it.
Release notes
Changes since Git for Windows v2.53.0(2) (March 10th 2026)
This is a security fix release, addressing CVE-2026-32631.
- CVE-2026-32631, Git for Windows: When a user clones a repository containing symbolic links pointing to network drives, Git follows those symlinks during checkout, causing Windows to transparently perform NTLM authentication and disclose the user's NTLMv2 hash to an attacker-controlled server. Since NTLM hashing is weak, the captured hash can potentially be brute-forced to recover the user's credentials. This is addressed by preventing git clone from following symbolic links that point to network drives during checkout.https://github.com/git-for-windows/git/releases/tag/v2.53.0.windows.3
