PT-2026-67304 · Pypi · Gitpython

Faze-Up · CVE-2026-67324 · Published 2026-07-21 · Updated 2026-08-01

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GitPython version 3.1.50

Description An issue exists where the software fails to recognize joined short-option forms, such as -u<value>, which is the short form of --upload-pack=<value>, when enforcing its default unsafe-option gate. If an application passes attacker-influenced clone options into the Repo.clone from() function using the multi options parameter while allow unsafe options is set to False, an attacker can provide -u<helper> to bypass the security gate. This allows the execution of an arbitrary helper command during the clone process.

Recommendations Update GitPython to version 3.1.51.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-67324

GHSA-V396-V7Q4-X2QJ

Affected Products

Gitpython

References · 10

• 🔥 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v396-v7q4-x2qj · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/67xxx/CVE-2026-67324.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-67324 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-67324 · Security Note
• https://osv.dev/vulnerability/GHSA-v396-v7q4-x2qj · Vendor Advisory
• https://github.com/gitpython-developers/GitPython/pull/2162 · Note
• https://github.com/gitpython-developers/GitPython · Note
• https://github.com/gitpython-developers/GitPython/releases/tag/3.1.51 · Note
• https://t.me/CVEtracker/62009 · Telegram Post
• https://vulncheck.com/advisories/gitpython-authentication-bypass-via-joined-short-options · Note