CVE-2025-41390 | Truffle Security TruffleHog 3.90.2 Repository inclusion of functionality from untrusted control sphere (TALOS-2025-2243)

October 20, 2025 Yanac

A vulnerability labeled as critical has been found in Truffle Security TruffleHog 3.90.2. Affected by this issue is some unknown functionality of the component Repository Handler. Such manipulation leads to inclusion of functionality from untrusted control sphere.

This vulnerability is documented as CVE-2025-41390. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More