In gix (gitoxide) 0.63.0 through 0.89.0, Cache::protect_options() reads core.protectHFS, core.protectNTFS and gitoxide.core.protectWindows with the unfiltered config accessor, so a repository opened with reduced trust (ownership mismatch) honors these settings from the untrusted repository-local .git/config. An attacker controlling that config can disable the .git path-confusion checks and get crafted tree entries written into .git on checkout, index build, merge or tree edit, potentially leading to code execution through hooks. Fixed in 0.90.0.