GitPython is a Python library for interacting with Git repositories. Versions 3.1.30 through 3.1.46 block dangerous Git options like --upload-pack and --receive-pack by default. However, the equivalent Python keyword arguments upload_pack and receive_pack bypass this blocking mechanism. If an application passes attacker-controlled values for these kwargs into methods such as Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push(), it can result in arbitrary OS command execution even when allow_unsafe_options is set to False. This vulnerability is identified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command). The issue has been patched in GitPython version 3.1.47.

Successful exploitation allows an attacker with the ability to control certain method arguments in GitPython to execute arbitrary OS commands on the host system. This can lead to full compromise of confidentiality, integrity, and availability of the affected system. The CVSS v3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, and no user interaction required.

Upgrade GitPython to version 3.1.47 or later, where this vulnerability has been patched. Until upgrading, avoid passing untrusted or attacker-controlled input into the upload_pack and receive_pack keyword arguments of Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push() methods. Patch status is confirmed by the vendor advisory indicating the fix in version 3.1.47.