CVE-2026-76218 — GitPython before 3.1.58 Remote Code Execution via Repo.init
GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template paramete…
Published: 2026-08-19 · CVSS: 7.7 · CVSS 4.0
GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template parameter pointing to a directory with malicious git hooks that execute arbitrary code when git operations are performed on the initialized repository.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7