CVE-2026-76217
MediumCVSS 6.5Summary
GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove() and Head.checkout(). Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents returned in GitCommandError.stderr.
Risk Assessment
Risk of disclosure of sensitive files accessible to the process, potentially leading to data leakage, including keys, passwords, and other sensitive information.
Recommendation
Upgrade GitPython to version 3.1.58 or later, which includes the fix for this vulnerability.
Original NVD description (English source)
GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove() and Head.checkout(). Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents returned in GitCommandError.stderr.