high 8.8

CVE-2026-67325 json

GitPython before 3.1.51 Command Injection via option prefix abbreviation

published 2026-07-21 3 mo ago modified 2026-10-23 16 d ago also GHSA-2f96-g7mh-g2hx , PYSEC-2026-3836 , EUVD-2026-51858

cvss: 8.8; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 2.2%; EPSS 2.2% chance of exploitation in 30 days, percentile 82%
public exploits: 0; none known

GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers can bypass the unsafe options guard by using abbreviated option names like upload_p instead of upload_pack, which git resolves to dangerous options and executes arbitrary commands.

Patch / fix

fixed in 2 distros 4 links 3

pypi gitpython 3.1.51
gitpython-developers GitPython 3.1.51

debian red hat suse opensuse

python-git Debian 12 3.1.30-1+deb12u3
python-git Debian 13 3.1.44-1+deb13u1
python-git Debian 14 3.1.61-1

debian advisories DEBIAN-CVE-2026-67325

receptor ansible automation platform inside 2.5, ansible automation platform developer 2.5, ansible automation platform 2.5 1.6.8-1.el8ap
receptor ansible automation platform inside 2.6, ansible automation platform inside 2.5, ansible automation platform developer 2.6 +3 more 1.6.8-1.el9ap
python3.12-sqlparse ansible automation platform developer 2.5, ansible automation platform 2.5 0.6.0-1.el8ap
python3.12-sqlparse ansible automation platform developer 2.6, ansible automation platform developer 2.5, ansible automation platform 2.6 +1 more 0.6.0-1.el9ap
python3.12-gitpython ansible automation platform 2.5 3.1.60-1.el8ap
python3.12-gitpython ansible automation platform 2.6, ansible automation platform 2.5 3.1.60-1.el9ap
automation-gateway-server ansible automation platform 2.5 2.5.20260923-1.el8ap
automation-gateway-server ansible automation platform 2.5 2.5.20260923-1.el9ap

red hat advisories RHSA-2026:71114 RHSA-2026:71113 RHSA-2026:59135 RHSA-2026:59136 RHSA-2026:45940 RHSA-2026:44416

python-GitPython SLES for SAP 15 SP6, SLES for SAP 15 SP5, SLES for SAP 15 SP4 +8 more 3.1.34.1693646983.2a2ae77-150400.9.8.1

suse advisories SUSE-SU-2026:4072-1

python-GitPython openSUSE Leap 16.0 3.1.44-160000.4.1
python-GitPython openSUSE Tumbleweed 3.1.58-1.1

opensuse advisories openSUSE-SU-2026:21874-1 openSUSE-SU-2026:11466-1

github.com/gitpython-developers/GitPython@5680608 commit
github.com/gitpython-developers/GitPython#2161 pull request
github.com/gitpython-developers/GitPython/releases/tag/3.1.51 release

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-67325 updated 2026-11-04 cvss 8.8

gitpython: GitPython: Command Injection via Git option prefix abbreviation

Red Hat Exploit Intelligence exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 Red Hat Migration Toolkit for Applications 8 mta/mta-solution-server-rhel9
affected: workaround, no fix available
Red Hat AI Inference Server rhaiis/vllm-cpu-rhel9, rhaiis/vllm-tpu-rhel9 Red Hat Ansible Automation Platform 2 ansible-automation-platform-24/hub-rhel8, ansible-automation-platform-24/controller-rhel8
affected: workaround, no fix planned “Will not fix”
Red Hat Enterprise Linux AI (RHEL AI) 3 rhelai3/bootc-cuda-rhel9, rhelai3/bootc-rocm-rhel9, rhelai3/bootc-gaudi-rhel9, rhelai3/disk-image-cuda-rhel9
affected: workaround, no fix available, no fix planned “Will not fix”
Red Hat OpenShift AI (RHOAI) rhoai/odh-th06-cpu-torch291-py312-rhel9, rhoai/odh-th06-cuda130-torch291-py312-rhel9
affected: workaround, no fix available
Red Hat Ansible Automation Platform 2.5 ansible-automation-platform-25/hub-rhel8 1787101922, ansible-automation-platform-25/controller-rhel8 1789607021
fixed: vendor fix RHSA-2026:71210
Red Hat Ansible Automation Platform 2.5 for RHEL 8 python3.12-gitpython 3.1.59-1.el8ap, automation-controller-venv-tower 4.6.33-1.el8ap Red Hat Ansible Automation Platform 2.5 for RHEL 9 python3.12-gitpython 3.1.59-1.el9ap, automation-controller-venv-tower 4.6.33-1.el9ap
fixed: vendor fix RHSA-2026:71114
Red Hat Ansible Automation Platform 2.6 ansible-automation-platform-26/hub-rhel9 1787220598, ansible-automation-platform-26/controller-rhel9 1789673739
fixed: vendor fix RHSA-2026:71179
Red Hat Ansible Automation Platform 2.6 for RHEL 9 python3.12-gitpython 3.1.59-1.el9ap, automation-controller-venv-tower 4.7.17-1.el9ap
fixed: vendor fix RHSA-2026:71113

show 13 more

Red Hat Ansible Automation Platform 2.7 ansible-automation-platform-27/hub-rhel9 1788918708, ansible-automation-platform-27/controller-rhel9 1788918363
fixed: vendor fix RHSA-2026:67279
Red Hat Hardened Images lld 22.1.8-4.1.hum1, lld21 21.1.8-8.hum1, lldb 22.1.8-4.1.hum1, lldb21 21.1.8-8.hum1, llvm 22.1.8-4.1.hum1, llvm21 21.1.8-8.hum1, +39 more
fixed: vendor fix RHSA-2026:44416
Red Hat OpenShift AI 2.25 rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 1788185839, rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 1788185798, rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 1788185733, rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 1788185436, rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 1788185848, rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 1788185899, +4 more
fixed: vendor fix RHSA-2026:65126
Red Hat OpenShift AI 3.3 rhoai/odh-mlflow-rhel9 1789653606, rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 1790260954, rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 1790072130, rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9 1790072109, rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 1789651387, rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 1789651385, +5 more
fixed: vendor fix RHSA-2026:73987
Red Hat OpenShift AI 3.4 rhoai/odh-mlflow-rhel9 1791865967, rhoai/odh-th06-cpu-torch210-py312-rhel9 1791874335, rhoai/odh-th06-rocm64-torch291-py312-rhel9 1791872119, rhoai/odh-th06-cuda130-torch210-py312-rhel9 1791961113, rhoai/odh-training-cuda128-torch29-py312-rhel9 1791786619, rhoai/odh-trustyai-nemo-guardrails-server-rhel9 1791556128, +17 more
fixed: vendor fix RHSA-2026:84734
Red Hat Satellite 6.18 satellite/iop-vmaas-rhel9 1788226499, satellite/iop-vulnerability-engine-rhel9 1788190382
fixed: vendor fix RHSA-2026:63372
Red Hat Satellite 6.19 satellite/iop-vmaas-rhel9 1788254161, satellite/iop-vulnerability-engine-rhel9 1788190224
fixed: vendor fix RHSA-2026:63354
Red Hat Pen Drive Powered by Red Hat Lightspeed pen-drive/pen-drive-scanner-rhel9
not affected: component not present
Red Hat Ansible Automation Platform 2.5 ansible-automation-platform-25/hub-rhel8 1789606395, ansible-automation-platform-25/gateway-rhel8 1787100608, ansible-automation-platform-25/gateway-rhel8 1789605572, ansible-automation-platform-25/hub-web-rhel8 1787185021, ansible-automation-platform-25/hub-web-rhel8 1789690469, ansible-automation-platform-25/receptor-rhel8 1787100120, +46 more Red Hat Ansible Automation Platform 2.5 for RHEL 8 receptor 1.6.8-1.el8ap, receptorctl 1.6.8-1.el8ap, automation-hub 4.10.18-1.el8ap, automation-hub 4.10.19-1.el8ap, python3.12-django 5.2.17-1.el8ap, python3.12-aiohttp 3.14.3-1.el8ap, +31 more Red Hat Ansible Automation Platform 2.5 for RHEL 9 receptor 1.6.8-1.el9ap, receptorctl 1.6.8-1.el9ap, automation-hub 4.10.18-1.el9ap, automation-hub 4.10.19-1.el9ap, python3.12-django 5.2.17-1.el9ap, python3.12-aiohttp 3.14.3-1.el9ap, +31 more Red Hat Ansible Automation Platform 2.6 ansible-automation-platform-26/hub-rhel9 1789611274, ansible-automation-platform-26/gateway-rhel9 1787219751, ansible-automation-platform-26/gateway-rhel9 1789666472, ansible-automation-platform-26/hub-web-rhel9 1787224278, ansible-automation-platform-26/hub-web-rhel9 1789615881, ansible-automation-platform-26/receptor-rhel9 1787202412, +54 more Red Hat Ansible Automation Platform 2.6 for RHEL 9 receptor 1.6.8-1.el9ap, molecule 26.8.0-1.el9ap, receptorctl 1.6.8-1.el9ap, ansible-lint 26.8.0-1.el9ap, python3.12-nh3 0.3.6-1.el9ap, ansible-creator 26.8.0-1.el9ap, +71 more Red Hat Ansible Automation Platform 2.6 for RHEL 10 receptor 1.6.8-1.el10ap, molecule 26.8.0-1.el10ap, receptorctl 1.6.8-1.el10ap, ansible-lint 26.8.0-1.el10ap, python-django 5.2.17-1.el10ap, python-sqlparse 0.6.0-1.el10ap, +11 more

+1 more productsfewer

Red Hat Ansible Automation Platform 2.7 ansible-automation-platform-27/gateway-rhel9 1788918510, ansible-automation-platform-27/hub-web-rhel9 1788924567, ansible-automation-platform-27/receptor-rhel9 1788918370, ansible-automation-platform-27/mcp-tools-rhel9 1788917342, ansible-automation-platform-27/de-minimal-rhel9 1788920534, ansible-automation-platform-27/ee-minimal-rhel9 1788901236, +24 more

not affected: vulnerable code not present
Red Hat Hardened Images rust 1.97.1-2.hum1
not affected: component not present
Red Hat OpenShift AI 2.25 rhoai/odh-rhel9-operator 1788331391, rhoai/odh-vllm-cpu-rhel9 1786712073, rhoai/odh-dashboard-rhel9 1788312226, rhoai/odh-modelmesh-rhel9 1788319539, rhoai/odh-operator-bundle 1788332816, rhoai/odh-vllm-cuda-rhel9 1786710989, +61 more Red Hat OpenShift AI 3.3 rhoai/odh-cli-rhel9 1790070206, rhoai/rhai-cli-rhel9 1790070206, rhoai/odh-trainer-rhel9 1790136369, rhoai/odh-maas-api-rhel9 1790131842, rhoai/odh-mlserver-rhel9 1789121365, rhoai/odh-rhel9-operator 1790686009, +66 more Red Hat OpenShift AI 3.4 rhoai/odh-cli-rhel9 1791509689, rhoai/rhai-cli-rhel9 1791509689, rhoai/odh-automl-rhel9 1791535789, rhoai/odh-autorag-rhel9 1791557539, rhoai/odh-trainer-rhel9 1791869783, rhoai/odh-eval-hub-rhel9 1791852583, +77 more
not affected: vulnerable code not present
Red Hat OpenStack Platform 16.2 python3-GitPython
not affected: vulnerable code cannot be controlled by adversary
Red Hat OpenStack Platform 17.1 GitPython, python3-GitPython
not affected: vulnerable code not in execute path

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation: Proof of concept is public
Automatable: no
Technical impact: total
Assessed: 3 mo ago (2026-08-05)

Exploit prediction

2.21% chance of exploitation in the next 30 days, higher than 82% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

github.com https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	4.0	8.7	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CNA	3.1	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA	4.0	8.7	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
OSV	3.1	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
GitHub	3.1	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected packages

ecosystem	package	affected	fixed in
pypi	gitpython	<3.1.51	3.1.51

Affected products

gitpython-developers GitPython

Classification

Weakness

CWE-78 Improper Neutralization of Special Elements used in an OS Command
CWE-184 Incomplete List of Disallowed Inputs

References

github.com /gitpython-developers/GitPython/pull/2161
web
github.com /gitpython-developers/GitPython/commit/56806080c1348749b07daa4a2024ce47b3cad285
web
github.com /gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx
vendor-advisory, exploit, web
vulncheck.com /advisories/gitpython-before-command-injection-via-option-prefix-abbreviation
third-party-advisory, web
nvd.nist.gov /vuln/detail/CVE-2026-67325
advisory
github.com /gitpython-developers/GitPython
package
github.com /gitpython-developers/GitPython/releases/tag/3.1.51
web
pypi.org /project/gitpython
package
github.com /advisories/GHSA-2f96-g7mh-g2hx
advisory

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary