GitPython versions prior to 2.26.0 contain a vulnerability in the TagReference.create() method where a positional 'reference' argument can bypass the intended unsafe option guard for '--file'. This allows an attacker to cause an arbitrary local file read, with the file contents returned as the annotated tag message. The issue arises because the unsafe option guard only inspects keyword arguments, not positional ones, enabling the bypass. A fix is available in version 2.26.0.