Sensitive-file disclosure via dereferenced object-directory symlinks

Information disclosure in Git allows local users to copy sensitive files through a malicious local clone or recursively cloned submodule. The local clone optimization dereferences symbolic links inside $GIT_DIR/objects and hardlinks or copies their targets into the destination instead of preserving or rejecting the links. Exploitation requires a victim to clone the malicious repository on the same volume or use --recurse-submodules, exposing readable host files in the resulting clone.