A critical command injection vulnerability in GitPython allows attackers to bypass security restrictions and execute arbitrary commands when processing untrusted repository clone options.

The library does not correctly identify joined short-option forms, such as -u, when enforcing the unsafe-option gate. This flaw allows an attacker to inject malicious helper commands that are subsequently executed by the underlying Git binary.

With a CVSS score of 9.8, this vulnerability represents a severe threat to any application that uses GitPython to process user-supplied clone parameters. Exploitation leads to remote code execution on the host machine, potentially exposing the entire application environment to unauthorized access or system destruction.

Immediate Action: Upgrade the GitPython package to version 3.1.51 or later.

Proactive Monitoring: Monitor system logs for unexpected Git process spawns or suspicious command-line arguments initiated by the application.

Compensating Controls: Implement strict input validation on all parameters passed to GitPython and ensure that the application runs with the least privilege necessary to limit the impact of potential command execution.

Public Exploit Available: Unknown

This vulnerability is a high-priority security issue that requires immediate attention for all users of GitPython. Organizations should verify their dependency trees and ensure that version 3.1.51 or newer is deployed to remediate the flaw.