GitPython is a Python library for interacting with Git repositories. In versions before 3.1.47, the _clone() method validates the multi_options parameter as a single string starting with certain expected prefixes. However, it then uses shlex.split on the joined string, which can split the input into multiple arguments, including unintended ones like --config core.hooksPath=/x. This allows an attacker to inject Git configuration options that cause Git to execute malicious hooks during clone operations. The vulnerability is identified as CWE-88 (Improper Neutralization of Argument Delimiters). It has a CVSS 3.1 score of 8.1, indicating high severity. The issue was patched in version 3.1.47.

Successful exploitation allows an attacker to execute arbitrary Git hooks during the cloning process by injecting additional Git command arguments. This can lead to full compromise of the environment running the clone operation, including confidentiality, integrity, and availability impacts as indicated by the CVSS vector (C:H/I:H/A:H). No known exploits in the wild have been reported at this time.

Upgrade GitPython to version 3.1.47 or later, where this vulnerability has been patched. There is no indication of alternative mitigations or temporary fixes. Users should verify their GitPython version and apply the official update to remediate this issue.