GitPython's Remote.pull() method improperly handles the positional refspec argument, allowing an attacker to inject a --upload-pack option that bypasses the unsafe-option guard. This leads to arbitrary command execution with the privileges of the calling process when using local-path or SSH transports. The vulnerability is fixed in version 3.0.0_15.

Mk: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

standardebooks

GitPython's Remote.pull() method improperly forwards its positional refspec argument directly to the underlying git pull command without properly filtering unsafe options. This allows an attacker who can control the refspec parameter to inject a --upload-pack option that executes arbitrary commands on the system with the privileges of the calling process. The vulnerability affects scenarios where the remote uses local-path or SSH transports, as these run the upload-pack program locally. This flaw is due to the unsafe-option guard only inspecting keyword arguments and not the positional refspec, enabling command execution without user interaction on the default code path.

Standardebooks: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary…

dstack

A command injection vulnerability exists in GitPython's Remote.pull() method where the positional refspec argument bypasses the unsafe-option guard. An attacker controlling this refspec can inject a --upload-pack option that is executed as a command on the local system when using local-path or SSH transports. This leads to arbitrary command execution with the privileges of the calling process. The issue affects dstack versions from 0.0.14 up to but not including 0.22.2 and is fixed in version 0.22.2.

Dstack: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

conda-lock

A command injection vulnerability exists in GitPython's Remote.pull() method where the positional refspec argument is not properly checked against unsafe options. This allows an attacker controlling the refspec to inject a malicious --upload-pack option, leading to arbitrary command execution with the privileges of the calling process. The vulnerability affects conda-lock versions from 2.0.0 up to but not including 4.0.3. Exploitation requires the remote to use a local-path or SSH transport, as HTTPS ignores client-supplied upload-pack programs. A fix is available in version 4.0.3.

Conda lock: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

gitup

GitPython's Remote.pull() method improperly handles the positional refspec argument, allowing an attacker to inject a --upload-pack option that bypasses unsafe option checks. This leads to arbitrary command execution with the privileges of the calling process when using local-path or SSH transports. The vulnerability affects GitPython versions from 0.5.1_5 up to but not including 0.5.2_9. A fix is available in version 0.5.2_9.

Gitup: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

cobo-cli

GitPython's Remote.pull() method improperly handles the positional refspec argument, allowing an attacker to inject a malicious --upload-pack option. This bypasses the unsafe-option guard that only inspects keyword arguments, leading to arbitrary command execution with the privileges of the calling process. Exploitation requires the remote to use a local-path or SSH transport, as HTTPS ignores client-supplied upload-pack programs. This vulnerability affects GitPython versions starting from 0.0.4 and has a high severity rating.

Cobo cli: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

cf2tf

GitPython's Remote.pull() method improperly handles the positional refspec argument, allowing an attacker to inject a --upload-pack option that bypasses the unsafe-option guard. This leads to arbitrary command execution with the privileges of the calling process when pulling from local-path or SSH transports. The vulnerability is fixed in version 0.9.2_11.

Cf2tf: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

cycode

GitPython's Remote.pull() method improperly handles its positional refspec argument, allowing an attacker to inject a crafted --upload-pack option that bypasses the unsafe-option guard. This leads to arbitrary command execution with the privileges of the calling process when pulling from local-path or SSH transports. The vulnerability arises because the unsafe-option check only inspects keyword arguments, not the positional refspec, which is forwarded verbatim to the git pull command. Exploitation requires attacker control over the refspec parameter and a vulnerable transport type.

Cycode: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

GitPython's Remote.pull() method improperly handles its positional refspec argument, allowing an attacker to supply a crafted refspec that includes an option-shaped value such as --upload-pack=<command>. This bypasses the unsafe-option guard which only inspects keyword arguments, leading to arbitrary command execution with the privileges of the calling process when using local-path or SSH transports. The vulnerability affects GitPython versions from 0.26.0 up to but not including 0.33.0 and has been fixed in version 0.33.0.

Apm: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

btcli

GitPython's Remote.pull() method improperly forwards a positional refspec argument to the underlying git pull command without filtering unsafe options. This allows an attacker controlling the refspec to inject a --upload-pack option that executes arbitrary commands with the privileges of the calling process. The vulnerability affects scenarios where the remote uses a local filesystem path or SSH transport, as these run the upload-pack program locally. Exploitation requires attacker control over the refspec parameter passed to Remote.pull().

Btcli: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

python-git

GitPython versions from 3.1.30 before 3.2.0 contain a remote code execution vulnerability in the Remote.pull() method. The vulnerability arises because the unsafe-option guard only inspects keyword arguments and not positional refspec arguments, allowing attackers controlling the refspec to supply a malicious --upload-pack option. This can lead to execution of arbitrary OS commands as the calling process over local-path or SSH transports. The vulnerability has a high severity with a CVSS score of 8.1.

Python git: GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose…

gitpython

GitPython versions from 3.1.30 up to but not including 3.2.0 contain a critical remote code execution vulnerability in the Remote.pull() method. The vulnerability arises because the unsafe-option guard only inspects keyword arguments and not positional refspec arguments, allowing attackers controlling the refspec to inject OS commands via the --upload-pack option. This can lead to execution of arbitrary commands as the calling process over local-path or SSH transports.

Search: CVE-2026-110858