Critical GitPython RCE Bypass in `Repo.clone_from` Unsafe Option Filtering
Vulnerability Disclosure · 2 sources · Updated 3mo ago · First seen Aug 1, 2026
GitPython 3.1.50 contains a critical flaw tracked as CVE-2026-67324 that lets attackers bypass the library’s default protection against unsafe clone options. The issue affects applications that pass attacker-influenced values into Repo.clone_from, particularly through multi_options, while relying on allow_unsafe_options=False to block dangerous arguments.
The bypass works because GitPython fails to detect joined short-option forms such as -u<value>, allowing the blocked --upload-pack/-u option to slip through filtering. An attacker can supply -u<helper> during a clone operation and cause Git to execute an attacker-specified helper command, resulting in remote command execution consistent with CWE-78. The vulnerability is rated critical with CVSS AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, and the fix is available in GitPython 3.1.51.
