GitPython before version 3.1.52 is vulnerable to environment-variable exfiltration during repository cloning. The vulnerability arises because the clone URL is passed through Git.polish_url(), which calls os.path.expandvars() on the URL on non-Cygwin platforms. This causes any environment variable tokens (e.g., $NAME or ${NAME}) embedded in the URL to be expanded to their actual values from the hosting process's environment. If an attacker controls the clone URL, they can craft it to include such tokens, causing sensitive environment variables like AWS_SECRET_ACCESS_KEY or GITHUB_TOKEN to be included in the URL. This expanded URL is then transmitted over the network to an attacker-controlled host during the clone operation, resulting in the disclosure of secrets.

An attacker who can control the clone URL can cause sensitive environment variables from the victim's environment to be disclosed over the network. This can lead to the exposure of critical secrets such as cloud service keys or personal access tokens, potentially enabling unauthorized access to other systems or services.

A patch is available for this vulnerability in GitPython version 3.1.52. Users should upgrade to version 3.1.52 or later to remediate this issue. Since this is a cloud service environment, the vendor manages remediation for the cloud-hosted service; users should verify with the vendor that their environment is updated accordingly. Until patched, avoid cloning from untrusted or attacker-controlled URLs that could embed environment variable tokens.