CVE-2026-69097: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in gitpython-developers GitPython
GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names. Attackers can inject core.sshCommand or other dangerous config keys into the victim's .git/config via create_submodule or clone_from operations, achieving remote code execution when git performs ssh operations.
AI Analysis
Technical Summary
CVE-2026-69097 is an injection vulnerability in GitPython before version 3.1.53. The issue arises because the software fails to properly neutralize special elements in output used by downstream components, specifically in git config files. Attackers can exploit this by crafting malicious submodule names that inject arbitrary configuration directives, including core.sshCommand, into the .git/config file. When Git subsequently performs SSH operations, this injected configuration can lead to remote code execution. The vulnerability has a CVSS 4.0 base score of 7.3, indicating high severity, with attack vector local, high attack complexity, and partial user interaction required.
Potential Impact
Successful exploitation allows attackers to inject arbitrary configuration directives into the victim's git configuration, including commands that can be executed remotely via SSH. This can lead to remote code execution on the victim's system when git performs SSH operations, posing a significant security risk.
Mitigation Recommendations
A fix is available in GitPython version 3.1.53 and later. Users should upgrade to version 3.1.53 or newer to remediate this vulnerability. No official vendor advisory content was provided, so patch status is based on the stated affected versions and description.
CVE-2026-69097: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in gitpython-developers GitPython
Description
GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names. Attackers can inject core.sshCommand or other dangerous config keys into the victim's .git/config via create_submodule or clone_from operations, achieving remote code execution when git performs ssh operations.
CVSS v4.0
Score 7.3high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-69097 is an injection vulnerability in GitPython before version 3.1.53. The issue arises because the software fails to properly neutralize special elements in output used by downstream components, specifically in git config files. Attackers can exploit this by crafting malicious submodule names that inject arbitrary configuration directives, including core.sshCommand, into the .git/config file. When Git subsequently performs SSH operations, this injected configuration can lead to remote code execution. The vulnerability has a CVSS 4.0 base score of 7.3, indicating high severity, with attack vector local, high attack complexity, and partial user interaction required.
Potential Impact
Successful exploitation allows attackers to inject arbitrary configuration directives into the victim's git configuration, including commands that can be executed remotely via SSH. This can lead to remote code execution on the victim's system when git performs SSH operations, posing a significant security risk.
Mitigation Recommendations
A fix is available in GitPython version 3.1.53 and later. Users should upgrade to version 3.1.53 or newer to remediate this vulnerability. No official vendor advisory content was provided, so patch status is based on the stated affected versions and description.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-03T10:44:14.336Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a7098b3bf32cb7a34a82347
Added to database: 08/03/2026, 13:33:39 UTC
Last enriched: 08/03/2026, 13:47:55 UTC
Last updated: 08/03/2026, 14:33:32 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.