CVE-2026-42284

Aliases:GHSA-x2qx-6953-8485PYSEC-2026-2161DEBIAN-CVE-2026-42284CGA-cc97-58fg-6c3gCGA-frq7-825g-vrh5CGA-fv32-jf2q-4347CGA-ggx3-5xq5-g9gfCGA-ph7h-gphc-xghfCGA-36c4-p8rc-349mCGA-3rq3-f7qf-pxg3CGA-43jf-5fxh-8vcqCGA-4455-vcw2-h55pCGA-733j-xhq8-fgxjCGA-9qm7-mx6c-p456CGA-wh3r-466r-3mg4CGA-wpj6-7wgf-6qf7CGA-x7cc-g84g-r77mCGA-2cwf-9xhc-gxmmCGA-6h52-prf6-29hr
Advisory lineage Upstream: 0 Downstream: 7
Modified
Published: 07 May 2026, 18:19
Last modified:09 May 2026, 03:56

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.8 CRITICAL
v3.1 (nvd)
EPSS Score
0.57% LOW
1% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
2 found
Dark Web
Not detected

Timeline

07 May 2026, 18:19
Published
Vulnerability first disclosed
09 May 2026, 03:56
Last Modified
Vulnerability information updated

Description

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(" ".join(multi_options)). A string like "--branch main --config core.hooksPath=/x" passes validation (starts with --branch), but after split becomes ["--branch", "main", "--config", "core.hooksPath=/x"]. Git applies the config and executes attacker hooks during clone. This issue has been patched in version 3.1.47.

CVSS Metrics

  • v3.1•HIGH•Score: 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.57%• Percentile: 46%

Techniques & Countermeasures

  • CWE-88•Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

    The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

Affected Systems

  • chainguard•awx

    < 24.6.1-r35

  • chainguard•checkov

    < 3.2.525-r0

  • chainguard•datahub-ingestion-fips

    < 1.5.0.1-r2

  • chainguard•mlflow

    < 3.11.1-r0 | < 3.16.0-r0

  • chainguard•mlflow-fips

    < 3.11.1-r0

  • chainguard•opal

    < 0.9.5-r0

  • chainguard•open-webui

    < 0.8.12-r4 | < 0.9.2-r0

  • wolfi•checkov

    < 3.2.525-r0

  • wolfi•mlflow

    < 3.11.1-r0 | < 3.16.0-r0

  • wolfi•open-webui

    < 0.8.12-r4 | < 0.9.2-r0

  • debian•python-git

    all | all | all | < 3.1.50-1

  • gitpython_project•gitpython

    < 3.1.47

  • gitpython-developers•gitpython

    < 3.1.47

  • PyPI•gitpython

    < 3.1.47

References (7)