GitPython's config-name validator only sanitizes CR, LF, and NUL characters for option names but fails to reject characters such as '=', '#', ';', '[', ']', or whitespace. When an attacker-controlled option name containing these characters is written to the git config file, it results in forged git configuration directives. For example, an option name like 'sshCommand = touch <cmd> #' is written as '\tsshCommand = touch <cmd> # = <value>', which git interprets as setting core.sshCommand to 'touch <cmd>', enabling remote code execution on the next git operation. The root cause is that the bracket/quote state machine validation applies only to section names, not option names. This vulnerability is distinct from other known injection issues in GitPython. A proof of concept demonstrates that setting such an option name results in arbitrary command execution. The vulnerability affects GitPython versions up to 3.1.57 and snowflake-cli versions >=3.4.1 <3.25.0. A patch is available that applies stricter validation to option names.

An attacker able to supply a crafted option name to the GitPython config writer can inject arbitrary git configuration directives, including core.sshCommand or core.hooksPath. This leads to remote code execution when git performs subsequent operations involving SSH or hooks. The impact includes full system compromise under the context of the git operation. Exploitation requires the embedding application to forward attacker-controlled option names to the config writer. There are no known exploits in the wild at this time.

A patch is available that extends the section-name safety checks to option names, rejecting unsafe characters such as '=', '#', ';', '[', ']', and whitespace. Users should upgrade GitPython to a fixed version beyond 3.1.57 and snowflake-cli outside the affected range >=3.4.1 <3.25.0. Until patched, avoid passing untrusted input as option names to the config writer. Review application code that interacts with GitPython's config writer to ensure option names are not attacker-controlled.