A critical command injection vulnerability (CVE-2026-110858) exists in GitPython versions before 3.2.0, affecting Red Hat Ansible Automation Platform 2.4. The flaw occurs via the Remote.pull() refspec, allowing potential command injection. Red Hat has issued a security advisory and released updates to fix this issue in the automation-controller component. Users of Red Hat Ansible Automation Platform 2.4 are advised to apply the provided updates to remediate the vulnerability.

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

snakemake

GitPython's Remote.pull() method improperly handles the positional refspec argument, allowing an attacker to inject a malicious --upload-pack option that bypasses the unsafe-option guard. This leads to arbitrary command execution with the privileges of the calling process when using local-path or SSH transports. The vulnerability affects Snakemake versions from 7.20.0 up to but not including 9.27.0_1. A fix is available in version 9.27.0_1.

Snakemake: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

tern

GitPython's Remote.pull() method improperly handles its positional refspec argument, allowing an attacker controlling this input to inject a --upload-pack option that bypasses unsafe option guards. This leads to arbitrary command execution with the privileges of the calling process when pulling from local-path or SSH transports. The vulnerability arises because the unsafe option check only inspects keyword arguments, not the positional refspec, and git pull forwards the refspec to an internal fetch without a separator, enabling the injected option to be executed.

Tern: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

tartufo

GitPython's Remote.pull() method improperly handles its positional refspec argument, allowing an attacker to inject a crafted --upload-pack option that bypasses the unsafe-option guard. This leads to arbitrary command execution with the privileges of the calling process when using local-path or SSH transports. The vulnerability arises because the unsafe-option check only inspects keyword arguments, not positional ones, and git pull forwards the refspec to an internal git fetch without a separator, enabling the injected option to be executed.

Tartufo: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

legit

GitPython's Remote.pull() method improperly handles its positional refspec argument, allowing an attacker to supply a crafted refspec that bypasses the unsafe-option guard. This leads to arbitrary command execution with the privileges of the calling process when using local-path or SSH transports. The vulnerability affects versions from 1.2.0.post0_3 up to but not including 1.2.0.post0_16 and has been assigned CVE-2026-110858. A fix is available in version 1.2.0.post0_16.

Legit: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

kimi-cli

A command injection vulnerability exists in the kimi-cli GitPython Remote.pull() method where the positional refspec argument bypasses the unsafe-option guard, allowing an attacker to execute arbitrary commands. This occurs because the unsafe-option check only inspects keyword arguments, not the positional refspec, enabling injection of a malicious --upload-pack option. Exploitation requires the remote to use a local-path or SSH transport, which executes the attacker-supplied command with the privileges of the calling process. The vulnerability affects kimi-cli versions from 1.11.0 up to but not including 1.50.0 and has been assigned CVE-2026-110858 with a high severity CVSS score of 8.1. A fix is available in version 1.50.0.

Kimi cli: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

cruft

GitPython's Remote.pull() method improperly handles the positional refspec argument, allowing an attacker to inject a --upload-pack option that bypasses the unsafe-option guard. This leads to arbitrary command execution with the privileges of the calling process when using local-path or SSH transports. The vulnerability affects versions from 2.12.0 up to but not including 2.16.0_17 and has a CVSS score of 8.1 (high severity).

Cruft: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

checkov

GitPython versions from 2.2.225 up to but not including 3.3.30 contain a vulnerability in the Remote.pull() method where the positional refspec argument is not properly checked against unsafe options. This allows an attacker controlling the refspec to inject a --upload-pack option that executes arbitrary commands with the privileges of the calling process when using local-path or SSH transports. The vulnerability is due to the unsafe-option guard only inspecting keyword arguments and not the positional refspec, enabling command execution without user interaction. A fix is available in GitPython version 3.3.30.

Checkov: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

GitPython's Remote.pull() method improperly forwards its positional refspec argument directly to the underlying git pull command without properly filtering unsafe options. This allows an attacker controlling the refspec to inject a --upload-pack option that executes arbitrary commands on the system with the privileges of the calling process. The vulnerability affects scenarios where the remote uses a local-path or SSH transport, as these run the upload-pack program locally. The flaw is fixed in version 3.67.1_18.

Dvc: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

otterdog

GitPython's Remote.pull() method improperly handles the positional refspec argument, allowing an attacker to supply a malicious option-like value such as --upload-pack=<command>. This bypasses the unsafe-option guard that only inspects keyword arguments, resulting in arbitrary command execution with the privileges of the calling process. Exploitation requires the remote to use a local-path or SSH transport, as HTTPS ignores the upload-pack option. The vulnerability affects GitPython versions from 1.0.1 up to but not including 1.6.1_1 and is fixed in version 1.6.1_1.

Otterdog: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

pygitup

A command injection vulnerability exists in GitPython's Remote.pull() method where the positional refspec argument is not properly checked against unsafe options. This allows an attacker controlling the refspec to inject a malicious --upload-pack option, leading to arbitrary command execution with the privileges of the calling process. The vulnerability affects GitPython versions from 2.2.0 up to but not including 2.6.0 and requires the remote to use a local-path or SSH transport. A fix is available in version 2.6.0.

Pygitup: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

opentimestamps-client

A command injection vulnerability exists in GitPython's Remote.pull() method used by the opentimestamps-client. The method improperly forwards a positional refspec argument directly to the git pull command without properly filtering unsafe options like --upload-pack. An attacker controlling the refspec can inject arbitrary commands executed with the privileges of the calling process when using local-path or SSH transports. This vulnerability is fixed in opentimestamps-client version 0.7.2_8.

Opentimestamps client: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling…

mistral-vibe

GitPython's Remote.pull() method improperly handles the positional refspec argument, allowing an attacker to inject a --upload-pack option that bypasses the unsafe-option guard. This leads to arbitrary command execution with the privileges of the calling process when pulling from local-path or SSH transports. The vulnerability affects versions from 2.1.0 up to but not including 3.0.3 and is fixed in version 3.0.3.

Mistral vibe: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary…

jiratui

GitPython's Remote.pull() method improperly handles the positional refspec argument, allowing an attacker controlling this input to inject a --upload-pack option that bypasses the unsafe-option guard. This leads to arbitrary command execution with the privileges of the calling process when pulling from local-path or SSH transports. The vulnerability arises because the unsafe-option check only inspects keyword arguments, not positional ones, and git pull forwards the refspec to git fetch without a protective '--' separator. Exploitation requires attacker control over the refspec and use of a vulnerable transport, but no additional privileges or user interaction are needed.

Jiratui: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

mentat

GitPython's Remote.pull() method improperly handles its positional refspec argument, allowing an attacker controlling this input to inject a --upload-pack option that bypasses unsafe option checks. This leads to arbitrary command execution with the privileges of the calling process when pulling from local-path or SSH transports. The vulnerability arises because the unsafe-option guard only inspects keyword arguments, not the positional refspec, which is forwarded verbatim to the git pull command. Exploitation requires attacker influence over the refspec parameter and a vulnerable transport type.

Mentat: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

fdroidserver

A vulnerability in GitPython's Remote.pull() method allows an attacker controlling the refspec argument to execute arbitrary commands. The unsafe-option guard does not inspect positional refspec arguments, enabling injection of the --upload-pack option which is executed by git pull on local-path or SSH transports. This leads to arbitrary command execution with the privileges of the calling process. The issue affects fdroidserver versions from 2.1.2 up to but not including 2.4.5_7 and has a high severity CVSS score of 8.1.

Fdroidserver: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary…

aider

GitPython's Remote.pull() method improperly forwards its positional refspec argument directly to the underlying git pull command without filtering for unsafe options. This allows an attacker controlling the refspec to inject a --upload-pack option that executes arbitrary commands with the privileges of the calling process. The vulnerability affects scenarios where the remote uses a local filesystem path or SSH transport, as these run the upload-pack program locally. Over HTTPS transport, this injection is ineffective. Exploitation requires attacker control over the refspec parameter passed to Remote.pull().

Aider: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command…

shallow-backup

GitPython's Remote.pull() method improperly forwards its positional refspec argument directly to the git pull command without filtering unsafe options. This allows an attacker controlling the refspec to inject a --upload-pack option, which bypasses the unsafe-option guard and results in arbitrary command execution with the privileges of the calling process. The vulnerability affects usage with local-path or SSH transports, where the upload-pack program is run locally. This flaw is fixed in version 6.6_8 of shallow-backup.

Shallow backup: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary…

snowflake-cli

A command injection vulnerability exists in GitPython's Remote.pull() method used by snowflake-cli. The method improperly forwards a positional refspec argument directly to the git pull command without filtering unsafe options like --upload-pack. An attacker controlling this refspec can execute arbitrary commands with the privileges of the calling process when the remote uses a local-path or SSH transport. This affects snowflake-cli versions from 3.4.1 up to but not including 3.30.0. The issue is fixed in version 3.30.0.

Snowflake cli: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary…

tach

A vulnerability in GitPython's Remote.pull() method allows an attacker controlling the refspec argument to execute arbitrary commands. The issue arises because the positional refspec argument bypasses the unsafe-option guard that is intended to block dangerous options like --upload-pack. This leads to arbitrary command execution with the privileges of the calling process when using local-path or SSH transports. The vulnerability affects GitPython versions from 0.19.7 up to but not including 0.35.2 and has been fixed in version 0.35.2.

Search: CVE-2026-110858