CVE-2026-42215

Aliases:GHSA-rpm5-65cw-6hj4PYSEC-2026-2160DEBIAN-CVE-2026-42215CGA-5fhg-8jgp-9h8jCGA-5frm-5q55-39hwCGA-6q5g-r7m5-p2h2CGA-8w65-44qv-r5cjCGA-36f4-q2xc-4mrmCGA-8wjg-rm5q-rgcjCGA-9w48-226r-mggwCGA-cqrp-4cxp-58vqCGA-j988-cq99-fmmpCGA-jcj2-247q-w8cvCGA-q845-jfm3-83jjCGA-rpxw-xpj8-xfpvCGA-vfp5-gxcx-7xwvCGA-vwm7-c3g3-g2w7CGA-jrgh-m3vj-xr9cCGA-v2m8-hrvg-w5vg
Advisory lineage Upstream: 0 Downstream: 9
Analyzed
Published: 07 May 2026, 18:17
Last modified:09 May 2026, 03:56

Vulnerability Summary

Overall Risk (default)
medium
45/100
CVSS Score
8.8 HIGH
v3.1 (cve.org)
EPSS Score
0.75% LOW
1% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

07 May 2026, 18:17
Published
Vulnerability first disclosed
09 May 2026, 03:56
Last Modified
Vulnerability information updated

Description

GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks dangerous Git options such as --upload-pack and --receive-pack by default, but the equivalent Python kwargs upload_pack and receive_pack bypass that check. If an application passes attacker-controlled kwargs into Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push(), this leads to arbitrary command execution even when allow_unsafe_options is left at its default value of False. This issue has been patched in version 3.1.47.

CVSS Metrics

  • v3.1•HIGH•Score: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.75%• Percentile: 53%

Techniques & Countermeasures

  • CWE-78•Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

    The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Affected Systems

  • chainguard•awx

    < 24.6.1-r35

  • chainguard•checkov

    < 3.2.525-r0

  • chainguard•datahub-ingestion-fips

    < 1.5.0.1-r2

  • chainguard•mlflow

    < 3.11.1-r0 | < 3.16.0-r0

  • chainguard•mlflow-fips

    < 3.11.1-r0

  • chainguard•opal

    < 0.9.5-r0

  • chainguard•open-webui

    < 0.8.12-r4 | < 0.9.2-r0

  • wolfi•checkov

    < 3.2.525-r0

  • wolfi•mlflow

    < 3.11.1-r0 | < 3.16.0-r0

  • wolfi•open-webui

    < 0.8.12-r4 | < 0.9.2-r0

  • debian•python-git

    all | all | all | < 3.1.50-1

  • gitpython_project•gitpython

    ≥ 3.1.30, < 3.1.47

  • gitpython-developers•gitpython

    ≥ 3.1.30, < 3.1.47

  • PyPI•gitpython

    ≥ 3.1.30, < 3.1.47

References (6)