CVE-2026-67323

🗓️ 01 Aug 2026 12:22:18Reported by MendType

mend🔗 www.mend.io👁 15 Views

GitPython command injection or file truncation via arguments in Repo methods.

Reporter	Title	Published	Views	Family All 142
attackerkb	CVE-2026-67323	1 Aug 202612:22	–	attackerkb
AlpineLinux	CVE-2026-67323	1 Aug 202612:22	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in python-git	15 Oct 202615:53	–	astralinux
BDU FSTEC	GitPython Arbitrary Command Execution File Overwrite	5 Aug 202600:00	–	bdu_fstec
Chainguard	CVE-2026-67323 vulnerabilities	9 Sep 202620:54	–	cgr
Circl	CVE-2026-67323	1 Aug 202620:01	–	circl
CVE	CVE-2026-67323	1 Aug 202612:22	–	cve
Cvelist	CVE-2026-67323 GitPython before 3.1.51 Command Injection via unguarded Git options	1 Aug 202612:22	–	cvelist
Debian	[SECURITY] [DLA 4872-1] python-git security update	31 Oct 202617:03	–	debian
Debian	[SECURITY] [DSA 6594-1] python-git security update	29 Oct 202618:53	–	debian

Vulners

Node

OR

gitpython_project gitpythonRange1.0.1–3.1.51

gitpython_project gitpythonRange0.1.4-pre–3.1.51

gitpython_project gitpythonRange0.1.7–3.1.51

Source	Link
github	www.github.com/advisories/GHSA-956x-8gvw-wg5v
github	www.github.com/gitpython-developers/GitPython/commit/701ce32fe5ba8cb622c0e0342a376a6beb47d738
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-67323
pypi	www.pypi.org/project/gitpython
github	www.github.com/gitpython-developers/GitPython/pull/2163
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/67xxx/CVE-2026-67323.json
github	www.github.com/gitpython-developers/GitPython/releases/tag/3.1.51
github	www.github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v
github	www.github.com/gitpython-developers/GitPython
vulncheck	www.vulncheck.com/advisories/gitpython-before-command-injection-via-unguarded-git-options

07 Oct 2026 22:50Current

7.7High risk

Vulners AI Score7.7

CVSS 3.18.4

CVSS 48.6

EPSS0.01251

SSVC

GitPython command injection file truncation Repo.archive()git.ls_remote()Repo.iter_commits()Repo.blame()