CVE-2026-76220 — GitPython before 3.1.58 Command Execution via split_single_char_options
GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single…
Published: 2026-08-19 · CVSS: 8.7 · CVSS 4.0
GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_char_options=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clone_from to emit a joined token parsed as --upload-pack, enabling arbitrary OS command execution at default allow_unsafe_options=False.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7