An attacker can craft a malicious Git repository containing a tree entry with a drive letter prefix. When a victim clones or checks out this repository on a Windows system, the library uses os.path.join incorrectly, causing the application to interpret the drive letter as an absolute path. This results in the target file being written to a location specified by the attacker, effectively discarding the intended worktree directory. This vulnerability provides a reliable primitive for Arbitrary File Write, which an attacker can weaponize to achieve Remote Code Execution (RCE) by targeting sensitive startup folders, user configuration files, or SSH keys.

Attack Chain

1. Attacker crafts a malicious Git repository on a Linux system containing a tree structure with a directory named 'C:'.
2. Attacker populates the 'C:' directory with a malicious payload, such as a startup shortcut or a modified '.gitconfig' file.
3. Attacker pushes the repository to a public Git hosting platform or lures a victim to clone the repository.
4. Victim executes a dulwich clone or checkout command on a Windows machine.
5. Dulwich processes the malicious tree entry 'C:' and incorrectly joins it with the target worktree path.
6. Python's os.path.join on Windows recognizes the drive letter prefix and treats the path as absolute, bypassing the target directory constraint.
7. Dulwich writes the attacker-supplied payload to an arbitrary location on the victim's filesystem.
8. Upon file execution or system interaction with the malicious file, the attacker gains code execution or persistence on the victim's host.

Impact

Successful exploitation results in arbitrary file write capabilities on Windows systems. This impact is severe for developers or CI/CD runners (e.g., GitHub Actions) using Dulwich, as it allows attackers to gain code execution by overwriting configuration files like C:\Users\<user>\.gitconfig or placing malicious binaries in C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\. CI/CD pipelines are particularly vulnerable, as automated clones of malicious PRs can result in secret exfiltration and immediate host compromise.

Recommendation

1. Upgrade the dulwich library to version 1.2.9 or later immediately to incorporate necessary path validation logic.
2. Implement monitoring for process creation events where python.exe or git.exe clones or checks out repositories to unconventional target paths on Windows.
3. Restrict write permissions on sensitive system directories such as the Windows Startup folder and user SSH directories to prevent unauthorized modifications by legitimate application processes.
4. Audit CI/CD runner environments for the presence of Dulwich and ensure runners are configured to use hardened Git clients or updated versions of the library.