CVE-2026-69097
Published:August 03, 2026
Updated:August 05, 2026
GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names. Attackers can inject core.sshCommand or other dangerous config keys into the victim's .git/config via create_submodule or clone_from operations, achieving remote code execution when git performs ssh operations.
Affected Packages
gitpython (CONDA):
Affected version(s) >=1.0.1 <3.1.53Fix Suggestion:
Update to version 3.1.53https://github.com/gitpython-developers/GitPython.git (GITHUB):
Affected version(s) >=winerr_show <3.1.53Fix Suggestion:
Update to version 3.1.53gitpython (PYTHON):
Affected version(s) >=0.1.7 <3.1.53Fix Suggestion:
Update to version 3.1.53Related Resources (7)
Do you need more information?
Contact UsCVSS v4
Base Score:
7.3
Attack Vector
LOCAL
Attack Complexity
HIGH
Attack Requirements
PRESENT
Privileges Required
NONE
User Interaction
PASSIVE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
HIGH
Vulnerable System Availability
HIGH
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Weakness Type (CWE)
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
EPSS
Base Score:
0.19