Exploit for Improper Input Validation in Gitpython Project Gitpython

githubexploit · 2026-08-18

Description

Improper input validation in GitPython allows unauthenticated code injection via crafted Git commands.

Gitpython Project Gitpython< 3.1.30

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

100%confidence this exploit runs

Based on 43 file(s) in the source

Modified:2026-08-18 08:55

Last Seen:2026-08-18 09:06

Reporter:curls0206

Repository:No longer on GitHub

README2 lines

## https://sploitus.com/exploit?id=096DB966-6C8E-5D41-BB49-3C0055212113
No description provided