An argument injection vulnerability in the GitPython library allows unauthenticated attackers to achieve remote code execution via malicious repository configurations.

This is an argument injection vulnerability categorized under CWE-88, occurring when the _clone() function improperly processes multi_options through command-line splitting. An unauthenticated attacker can supply crafted arguments that manipulate Git configurations and execute arbitrary hooks.

A successful exploit allows attackers to execute arbitrary code within the context of the application using GitPython, leading to potential system compromise, data theft, or lateral movement within the network. The high CVSS score of 8.1 reflects the severity of total technical impact on confidentiality, integrity, and availability, even though the attack complexity is high.

Immediate Action: Update GitPython to version 3.1.47 or later via PyPI to resolve the argument injection flaw.

Proactive Monitoring: Monitor application logs for unusual Git command-line arguments or unauthorized process execution stemming from repository cloning activities.

Compensating Controls: Restrict application network access to prevent cloning from untrusted or external repositories until patches can be deployed.

Public Exploit Available: No — exploit_available (false / unknown).

Security teams must treat this vulnerability with high urgency due to the potential for remote code execution. Immediate adoption of the patched version 3.1.47 is critical to neutralize the argument injection vector and protect underlying systems from compromise.