Gitpython Before 3.1.60 Remote Code Execution Via Git Directory Impersonation

Back www.vulncheck.com

Gitpython Before 3.1.60 Remote Code Execution Via Git Directory Impersonation

www.vulncheck.com • September 10, 2026

Share: View original

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Gitpython Vulnerabilities: RCE and DoS Risks Identified Two critical vulnerabilities have been identified in Gitpython versions prior to 3.1.60. The first vulnerability allows for remote code execution (RCE) through Git directory impersonation, potentially affecting any system utilizing an unpatched version. The second vulnerability leads to denial of service (DoS) via regular expression denial of service (ReDoS) attacks. Both vulnerabilities could be exploited by attackers to disrupt services or execute arbitrary code. Users of Gitpython are strongly advised to upgrade to version 3.1.60 or later to mitigate these risks. No active exploitation has been reported yet, but the vulnerabilities pose significant risks to affected systems. The vulnerabilities have not been assigned CVEs in the articles but are critical enough to warrant immediate attention. 2 sources 58

Extracted Entities

Attack Types (1)

Zero-day Exploit

Tools (1)