A critical flaw in GitPython versions before 3.1.59 lets attacker-crafted git-config values become live directives during unrelated config writes, resulting in arbitrary code execution.
What Is It
CVE-2026-78676 is an argument/directive injection vulnerability (CWE-88) in GitPython, the Python library for interacting with Git repositories. Versions before 3.1.59 fail to safely re-serialize multi-line git-config values during write operations. A quoted value containing embedded newlines sits dormant in the config file until GitPython performs any config write; at that point the re-serialization corrupts the value, splitting it into what Git then parses as separate, live configuration directives.
The description specifically calls out core.hooksPath as an example of an injected directive. Because Git invokes hooks automatically during normal repository operations, a redirected hooks path gives an attacker arbitrary code execution.
Why It Matters
The CVSS v3.1 base score is 9.8 (CRITICAL), vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. A CVSS v4.0 secondary score of 9.3 (CRITICAL) was also assigned. Attack vector is network, attack complexity is low, and neither privileges nor user interaction are required, with high impact to confidentiality, integrity, and availability.
The trigger condition is what makes this dangerous in practice: the malicious config only needs to be present, and any unrelated GitPython config write activates it. That fits automation; CI/CD systems, repo-scanning services, and tooling that programmatically touches Git repositories.
No CISA KEV entry was supplied for this CVE, so there is no confirmed active exploitation or KEV-mandated remediation deadline to report. Exploit maturity in the CVSS v4.0 vector is NOT_DEFINED.
What's Vulnerable
- Vendor: gitpython-developers
- Product: GitPython (
pkg:pypi/GitPython) - Affected: all versions before 3.1.59
- Unaffected: 3.1.59 and later
No CPE configurations were listed in the NVD record.
Patch Status
Fixed in GitPython 3.1.59. Upgrade any installation below that version. The default status for versions outside the listed range is "unaffected," so 3.1.59 is the remediation baseline. Consult the GitHub Security Advisory (GHSA-284h-m62q-gf8w) for maintainer guidance.
Sources
- NVD, CVE-2026-78676 (published 2026-08-25, source: [email protected])
- GitHub Security Advisory GHSA-284h-m62q-gf8w; https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-284h-m62q-gf8w
- VulnCheck Advisory; https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-config-injection