GitPython is a Python library for interacting with Git repositories. Between versions 3.1.30 and before 3.1.47, the library blocks dangerous Git options like --upload-pack and --receive-pack by default. However, the equivalent Python keyword arguments upload_pack and receive_pack bypass this protection. If an application passes attacker-controlled values into Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push() via these kwargs, it can lead to arbitrary OS command execution even when allow_unsafe_options is set to False. This vulnerability is identified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command). The issue has been patched in version 3.1.47.

An attacker able to control the upload_pack or receive_pack keyword arguments in affected GitPython versions can execute arbitrary OS commands on the host system. This can lead to full compromise of confidentiality, integrity, and availability of the affected system. The CVSS 3.1 score is 8.8, indicating high severity with network attack vector, low attack complexity, requiring low privileges but no user interaction, and resulting in high impact on confidentiality, integrity, and availability.

Upgrade GitPython to version 3.1.47 or later, where this vulnerability is patched. Until upgrading, avoid passing untrusted or attacker-controlled input into the upload_pack and receive_pack keyword arguments in Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push() methods. Patch status is confirmed by the vendor advisory stating the fix is included in version 3.1.47.