CVE-2026-76220

🗓️ 19 Aug 2026 14:02:04Reported by Alpine Linux Development TeamType

Command execution in GitPython before 3.1.58 via bypass of check_unsafe_options guard in clone_from.

Reporter	Title	Published	Views	Family All 102
BDU FSTEC	The vulnerability of the `check_unsafe_options` mechanism in the Python library for interacting with Git repositories, GitPython, allows a malicious actor to execute arbitrary commands.	24 Aug 202600:00	–	bdu_fstec
Chainguard	CVE-2026-76220 vulnerabilities	11 Sep 202608:54	–	cgr
Circl	CVE-2026-76220	20 Aug 202608:00	–	circl
CVE	CVE-2026-76220	19 Aug 202614:02	–	cve
Cvelist	CVE-2026-76220 GitPython before 3.1.58 Command Execution via split_single_char_options	19 Aug 202614:02	–	cvelist
Debian CVE	CVE-2026-76220	19 Aug 202614:02	–	debiancve
EUVD	EUVD-2026-62461	19 Aug 202614:02	–	euvd
Github Security Blog	Duplicate Advisory: GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution	19 Aug 202615:32	–	github
Github Security Blog	GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution	7 Aug 202615:49	–	github
Mend	CVE-2026-76220	19 Aug 202614:02	–	mend