The vulnerability in GitPython's Repo.clone_from() method stems from the use of os.path.expandvars() on the remote URL argument via Git.polish_url(), which expands environment variables in the URL on non-Cygwin platforms. An attacker controlling the clone URL can embed environment variable tokens (e.g., ${AWS_SECRET_ACCESS_KEY}) that get expanded to secret values from the server's environment before being passed to the git clone subprocess. This results in secrets being transmitted over the network to attacker-controlled hosts, crossing trust boundaries without authentication or user interaction. The unsafe-protocol filter is applied before expansion, enabling protocol bypass if environment variables are also attacker-controlled. The issue affects all GitPython releases up to and including 3.1.50, confirmed on the main branch, with no current official fix or patch available.

This vulnerability allows an unauthenticated attacker who can supply a clone URL to exfiltrate sensitive environment variables from the server running GitPython. Secrets such as AWS credentials or GitHub tokens can be embedded in the URL and leaked over the network to attacker-controlled domains. This disclosure can lead to compromise of cloud resources or source code repositories. The unsafe-protocol check bypass further increases risk by potentially allowing execution of arbitrary git remote-helper transports if environment variables are also attacker-controlled. The vulnerability does not affect availability or integrity directly but causes high confidentiality impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid using Repo.clone_from() with untrusted URLs or URLs that could contain environment variable expansions. Restrict environment variables accessible to the GitPython process to minimize secret exposure. Monitor for updates from the GitPython maintainers addressing this issue. Do not rely on the unsafe-protocol filter alone as it is applied before variable expansion and can be bypassed.