{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","feed_url":"https://feed.craftedsignal.io/vendors/gitpython-developers/feed.json","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-67325"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["GitPython"],"_cs_severities":["high"],"_cs_tags":["vulnerability","command-injection","python"],"_cs_type":"advisory","_cs_vendors":["gitpython-developers"],"content_html":"\u003cp\u003eGitPython, a widely used library for interacting with Git repositories in Python, contains a critical security vulnerability (CVE-2026-67325) in versions prior to 3.1.51. The library implements a blocklist to prevent the passing of dangerous command-line options to the underlying git binary. However, the blocklist is incomplete as it does not account for Git's feature that allows for the abbreviation of long command-line options.\u003c/p\u003e\n\u003cp\u003eAn attacker can bypass these security restrictions by providing abbreviated versions of forbidden options, such as 'upload_p' instead of the full 'upload_pack'. When GitPython processes these inputs, the underlying system executes the git command with the injected, restricted flags. This leads to OS command injection, enabling unauthenticated or low-privilege users to achieve arbitrary command execution on the host running the application. This vulnerability is highly significant for any automated system or web application using GitPython to handle user-supplied Git repository configurations or operations.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows remote attackers to execute arbitrary system commands with the privileges of the application process. This can lead to full system compromise, data exfiltration, or lateral movement within the environment. Applications leveraging GitPython for CI/CD pipelines, automated repository management, or source code analysis tools are at high risk.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the GitPython library to version 3.1.51 or later immediately to incorporate the corrected blocklist logic.\u003c/li\u003e\n\u003cli\u003eReview all application code utilizing GitPython to identify instances where user-supplied input is used to construct Git commands.\u003c/li\u003e\n\u003cli\u003eAudit logs for suspicious git process arguments that utilize abbreviated long-options, such as --upload-p, --receive-p, or similar abbreviated variants that could indicate exploitation attempts.\u003c/li\u003e\n\u003cli\u003eApply the principle of least privilege by running applications that use GitPython under restricted service accounts to minimize the potential impact of a successful command injection.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-08-01T13:52:49Z","date_published":"2026-08-01T13:52:49Z","id":"https://feed.craftedsignal.io/briefs/2026-08-gitpython-injection/","summary":"GitPython versions prior to 3.1.51 are vulnerable to command injection because the library's security blocklist fails to account for Git command-line option abbreviation, allowing attackers to execute arbitrary commands.","title":"Command Injection Vulnerability in GitPython","url":"https://feed.craftedsignal.io/briefs/2026-08-gitpython-injection/"},{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-67324"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["GitPython (\u003c 3.1.51)"],"_cs_severities":["high"],"_cs_tags":["cve-2026-67324","command-injection","gitpython","python"],"_cs_type":"advisory","_cs_vendors":["gitpython-developers"],"content_html":"\u003cp\u003eGitPython versions prior to 3.1.51 contain an improper input validation vulnerability (CVE-2026-67324) that affects applications using the \u003ccode\u003eRepo.clone_from\u003c/code\u003e method. The library implements an 'unsafe-option' gate designed to prevent the injection of dangerous Git command-line options when \u003ccode\u003eallow_unsafe_options\u003c/code\u003e is set to \u003ccode\u003eFalse\u003c/code\u003e. However, the parser fails to correctly identify and block joined short-option forms, such as \u003ccode\u003e-u\u0026lt;value\u0026gt;\u003c/code\u003e, which represent the \u003ccode\u003e--upload-pack\u003c/code\u003e flag.\u003c/p\u003e\n\u003cp\u003eAn attacker capable of influencing the arguments passed to \u003ccode\u003eRepo.clone_from\u003c/code\u003e can provide a malicious value for the \u003ccode\u003e-u\u003c/code\u003e flag, such as \u003ccode\u003e-u\u0026lt;malicious_helper_command\u0026gt;\u003c/code\u003e. Because the library's security gate does not properly sanitize this joined format, the underlying Git process executes the attacker-supplied command. This vulnerability poses a significant risk to CI/CD pipelines, automated build systems, and any application that uses GitPython to clone untrusted repositories. The issue is resolved in version 3.1.51.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an attacker to achieve arbitrary OS command execution with the privileges of the application running the GitPython library. This can lead to full system compromise, exfiltration of credentials or source code, and persistence within the affected environment. The vulnerability impacts any infrastructure utilizing GitPython 3.1.50 for automated repository management.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eUpgrade the GitPython library to version 3.1.51 or later immediately across all environments.\u003c/li\u003e\n\u003cli\u003eAudit codebases for any use of \u003ccode\u003eRepo.clone_from\u003c/code\u003e where input from external sources or untrusted users is used to construct the \u003ccode\u003emulti_options\u003c/code\u003e argument.\u003c/li\u003e\n\u003cli\u003eImplement strict input validation or allowlisting for repository clone options if upgrading is not immediately feasible.\u003c/li\u003e\n\u003cli\u003eReview system logs for unexpected child processes spawned by services executing Git operations, focusing on processes originating from the Python interpreter environment.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-08-01T13:50:57Z","date_published":"2026-08-01T13:50:57Z","id":"https://feed.craftedsignal.io/briefs/2026-08-gitpython-bypass/","summary":"GitPython version 3.1.50 contains an input validation vulnerability that allows attackers to bypass security gates by using joined short-option forms, potentially leading to arbitrary command execution during repository cloning.","title":"GitPython Improper Input Validation Leads to Command Injection","url":"https://feed.craftedsignal.io/briefs/2026-08-gitpython-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Gitpython-Developers","version":"https://jsonfeed.org/version/1.1"}