The vulnerability arises because GitPython's check_unsafe_options method normalizes option names only by converting underscores to hyphens and performs exact dictionary lookups against a blocklist. However, git accepts any unambiguous prefix of a long option as valid, allowing abbreviated keys like 'upload_p' to bypass the blocklist and be passed to git as '--upload-p', which git resolves to the dangerous '--upload-pack' option. This leads to command injection in git clone, fetch, pull, and push operations. The issue affects all GitPython versions from the 3.1.47 blocklist fix through before 3.1.51. The vulnerability inherits the high severity of the parent CVE-2026-42215, with an estimated CVSS vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The problem is a classic CWE-184 (Incomplete List of Disallowed Inputs) leading to CWE-78 (OS Command Injection). A proof-of-concept demonstrates remote code execution by passing abbreviated option keys that execute arbitrary commands during git operations.

Successful exploitation allows an attacker to execute arbitrary commands on the host running GitPython by bypassing the unsafe options blocklist via abbreviated git option prefixes. This can lead to full remote code execution with the privileges of the GitPython process. The impact includes complete confidentiality, integrity, and availability compromise of the affected system. However, exploitation requires that the host application passes attacker-controlled keyword argument keys into GitPython's git command wrappers, which may limit exposure depending on the application context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid passing untrusted or attacker-controlled keyword argument keys to GitPython's clone, fetch, pull, or push methods. The vulnerability is a bypass of the existing blocklist, so relying on allow_unsafe_options=False alone is insufficient. Monitoring for updates from the GitPython maintainers and applying any forthcoming official fixes is recommended.