CyberRota Analysis
AI-GeneratedGitPython versions prior to 3.1.51 are vulnerable to a critical flaw that allows attackers to bypass security controls by injecting malicious clone options through the Repo.clone_from function. This can lead to the execution of arbitrary commands during the cloning process, potentially compromising the integrity of the application and its environment. Organizations using GitPython for repository management should prioritize upgrading to the patched version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>) when enforcing its default unsafe-option gate. When an application passes attacker-influenced clone options into Repo.clone_from(..., multi_options=..., allow_unsafe_options=False), an attacker can supply -u<helper> to bypass the gate that blocks --upload-pack/-u, causing Git to execute the specified helper command during clone. Fixed in 3.1.51.