PT-2026-78400

🗓️ 07 Aug 2026 00:00:00Reported by Positive TechnologiesType

GitPython before 3.1.58 allows RCE via Repo.init forwarding unsafe git options to malicious hook directories.

Reporter	Title	Published	Views	Family All 193
AlpineLinux	CVE-2026-73622	13 Aug 202611:28	–	alpinelinux
AlpineLinux	CVE-2026-73623	13 Aug 202611:28	–	alpinelinux
AlpineLinux	CVE-2026-76218	19 Aug 202614:02	–	alpinelinux
AlpineLinux	CVE-2026-76219	19 Aug 202614:02	–	alpinelinux
AlpineLinux	CVE-2026-76222	19 Aug 202614:02	–	alpinelinux
BDU FSTEC	The vulnerability of the Python library for interacting with git repositories, GitPython, arises from the lack of measures to neutralize special elements, allowing attackers to execute arbitrary code.	17 Aug 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the IndexFile.from_tree, IndexFile.reset, and IndexFile.merge_tree methods in the Python library for interacting with git repositories, GitPython, allow a malicious actor to rewrite any files they choose.	24 Aug 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the sm_name() function in the src/GitPython/git/objects/submodule/util.py file of the Python library for interacting with Git repositories in GitPython, which allows a attacker to compromise the integrity and accessibility of protected information.	24 Aug 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Python library for interacting with git repositories, GitPython, arises from the lack of protection for service data. This allows attackers to gain unauthorized access to protected information.	25 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Python library for interacting with git repositories, GitPython, arises from the possibility of introducing or modifying arguments, allowing attackers to execute arbitrary commands.	25 Sep 202600:00	–	bdu_fstec

Source	Link
bugzilla	www.bugzilla.suse.com/1275752
suse	www.suse.com/security/cve/CVE-2026-73622
osv	www.osv.dev/vulnerability/CVE-2026-76218
bugzilla	www.bugzilla.suse.com/1273364
suse	www.suse.com/security/cve/CVE-2026-67326
osv	www.osv.dev/vulnerability/PYSEC-2026-3840
bugzilla	www.bugzilla.suse.com/1275755
access	www.access.redhat.com/security/cve/CVE-2026-76218
github	www.github.com/gitpython-developers/GitPython/pull/2204
suse	www.suse.com/security/cve/CVE-2026-73623

18 Sep 2026 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 48.7 - 9.3

CVSS 3.18.2 - 8.8

EPSS0.00835

SSVC