Vendor
GitPython: Remote.pull() arbitrary command execution via refspec injection
1 TTPThe GitPython library fails to validate the refspec positional argument in Remote.pull(), allowing attackers to inject shell commands via --upload-pack options when using SSH or local transports.
GitPython: Path traversal and arbitrary code execution (CVE-2026-114145)
1 CVEGitPython versions prior to 3.2.1 are vulnerable to a path traversal flaw in the create_submodule() function, which allows an attacker-influenced submodule path to lead to the execution of a planted post-checkout hook.
Remote Code Execution in GitPython via Unsafe URL Handling
2 TTPs 2 CVEsGitPython versions prior to 3.2.0 contain a remote code execution vulnerability where the Git.ls_remote method improperly handles URLs, allowing arbitrary command execution via malicious remote-helper strings.
GitPython Repository Discovery Vulnerability Leading to RCE
1 TTP 1 CVEGitPython versions up to 3.1.59 are vulnerable to an arbitrary code execution flaw where malicious tracked repository content is misidentified as a Git directory, causing hooks to execute during standard repository operations.
Remote Code Execution in GitPython via Git Config Injection
4 TTPs 1 CVEGitPython versions before 3.1.59 contain a vulnerability where improper sanitization of multi-line configuration values allows attackers to inject arbitrary git directives, leading to remote code execution.
GitPython Command Injection via Unsafe Git Option Guard Bypass
2 TTPs 1 CVEA bypass of the GitPython safety guard allows arbitrary OS command execution via token smuggling when using single-character keyword arguments with split_single_char_options=False.
GitPython Argument Injection in IndexFile and TagReference
1 TTPGitPython fails to sanitize keyword arguments passed to git commands, allowing attackers to perform arbitrary file overwrites and unauthorized file reads.
GitPython Command Injection and File Truncation Vulnerability
1 TTP 1 CVEGitPython versions prior to 3.1.51 contain vulnerabilities allowing command injection and arbitrary file truncation through insufficient sanitization of keyword arguments and revision inputs.
Environment Variable Exfiltration in GitPython
1 TTP 1 CVEGitPython versions prior to 3.1.52 are vulnerable to environment variable exfiltration when an attacker provides a crafted remote URL to the Repo.clone_from() method.
GitPython Environment Variable Exfiltration via Remote URL Processing
2 TTPs 2 IOCsA vulnerability in GitPython allows environment variables to be exfiltrated when using `Repo.create_remote()` or `Remote.add()`, where attacker-supplied URLs are processed by `Git.polish_url()` expanding sensitive environment variables into the URL, which is then stored in `.git/config` and transmitted to an attacker-controlled host.
GitPython Incomplete Denylist Allows Arbitrary Command Execution via Git Clone Hooks
1 rule 3 TTPsA critical vulnerability in GitPython versions up to 3.1.53 allows attackers to achieve arbitrary command execution by influencing `git clone` options to include a malicious `--template` directory, which causes Git hooks to be copied and executed during cloning, even in default configurations.
GitPython config_writer() Newline Injection Bypasses CVE-2026-42215 Patch
2 rules 3 TTPs 1 CVEAn incomplete patch for CVE-2026-42215 in GitPython allows newline injection in the section parameter of the config_writer() function, enabling arbitrary .git/config modification and remote code execution via core.hooksPath.
GitPython config_writer().set_value() Newline Injection RCE
2 rules 1 TTPA newline injection vulnerability in GitPython's `config_writer().set_value()` function enables remote code execution by manipulating the `core.hooksPath` Git configuration.