CVE-2026-76220 is a command injection vulnerability in GitPython prior to version 3.1.58. The issue arises from improper neutralization of argument delimiters in the check_unsafe_options guard, which can be bypassed by combining a single-character keyword argument with split_single_char_options=false. This allows an attacker to craft a kwargs dictionary that emits a joined token parsed as --upload-pack, leading to arbitrary OS command execution. The vulnerability affects guarded methods such as clone_from when invoked with default allow_unsafe_options=false.

Successful exploitation allows an attacker with limited privileges (PR:L) and no user interaction (UI:N) to execute arbitrary operating system commands remotely (AV:N) with high impact on confidentiality, integrity, and availability. This can lead to full compromise of the affected system running vulnerable GitPython versions prior to 3.1.58.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid using untrusted input in kwargs passed to guarded methods like clone_from, especially when using split_single_char_options=false. Monitor vendor channels for updates and apply patches promptly once released.