Vulnerability Description
GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names. Attackers can inject core.sshCommand or other dangerous config keys into the victim's .git/config via create_submodule or clone_from operations, achieving remote code execution when git performs ssh operations.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3rp5-
- https://www.vulncheck.com/advisories/gitpython-before-config-injection-via-submo
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3rp5-
FAQ
What is CVE-2026-69097?
CVE-2026-69097 is a vulnerability with a CVSS score of 7.0 (HIGH). GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names. Attackers can inj...
How severe is CVE-2026-69097?
CVE-2026-69097 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-69097?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.