Security Flaw in GitPython Affects Multiple Versions

CVE-2026-78676

What is CVE-2026-78676?

GitPython, up to version 3.1.58, contains a vulnerability that allows attackers to inject malicious directives during git configuration write operations. By exploiting the flawed handling of multi-line values, attackers can alter dormant quoted structures, introducing live Git commands that execute arbitrary code through hook invocations. This security risk highlights the importance of maintaining updated software and understanding the implications of version management in code execution environments.

References