GitPython versions prior to 2.4.5_4 contain a vulnerability where an attacker-controlled submodule name in a cloned repository's .gitmodules file can cause GitPython to create and initialize a Git repository outside the intended working directory. This occurs because GitPython does not validate the submodule name, allowing directory traversal sequences. The issue is triggered when a victim clones a malicious repository and runs submodule initialization with GitPython. Core Git mitigates this attack, but GitPython's independent implementation lacks this protection. A fix is available in GitPython version 2.4.5_4.