GitPython versions prior to 9.25.1 contain a vulnerability where an attacker-controlled submodule name in a cloned repository's .gitmodules file can cause GitPython to create and initialize a Git repository outside the intended working directory. This occurs because GitPython does not validate submodule names for directory traversal sequences, unlike core Git which blocks this attack. The vulnerability requires the victim to clone a malicious repository and run submodule initialization via GitPython.