PT-2026-67306 · Pypi · Gitpython
CVSS v4.0
7.3
High
| Vector | AV:L/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
GitPython versions prior to 3.1.50
Description
GitPython fails to validate newline characters in the section parameter of the
config writer() function. This allows an attacker to inject arbitrary section headers into the .git/config file. By injecting newlines, an attacker can create a forged [core] section and modify the hooksPath variable to point to a directory under their control. This can lead to remote code execution when git hooks are triggered.Recommendations
Update GitPython to version 3.1.50 or later.
As a temporary workaround, restrict user-controlled input from being passed to the section parameter of the
config writer() function.Exploit
Fix
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gitpython