GitPython versions before 3.1.47 contain an argument injection vulnerability (CWE-88) in the _clone() method. The method validates multi_options as a list, but then joins and splits it using shlex.split, which can transform a single validated string into multiple arguments. For example, a string like "--branch main --config core.hooksPath=/x" passes validation but splits into separate arguments, enabling an attacker to inject a --config option that sets Git configuration to execute attacker-controlled hooks during cloning. This vulnerability allows arbitrary code execution via malicious Git hooks. The vulnerability is patched in version 3.1.47.

Successful exploitation allows an attacker to execute arbitrary code during the cloning of a Git repository by injecting malicious Git configuration options that cause execution of attacker-controlled hooks. This impacts confidentiality, integrity, and availability of the affected system. The CVSS 3.1 score is 8.1 (high), reflecting network attack vector, high impact on confidentiality, integrity, and availability, and no required privileges or user interaction.

Upgrade GitPython to version 3.1.47 or later, where this vulnerability is patched. No other mitigation is documented. Patch status is confirmed fixed in version 3.1.47.