Copyright © 2012 Red Hat, Inc. All rights reserved.
Moderate
2026-08-19T14:02:02
gitpython: GitPython: Arbitrary File Read via Crafted Parameters
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-88
GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove() and Head.checkout(). Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents returned in GitCommandError.stderr.
A flaw was found in GitPython where it fails to properly validate options provided to its git rm and git checkout commands. A remote attacker with low privileges could exploit this by supplying crafted parameters, such as --pathspec-from-file and --pathspec-file-nul. This vulnerability allows for arbitrary file disclosure, enabling the attacker to read any file accessible to the GitPython process.
GitPython before 3.1.58 does not validate options passed to the underlying `git rm` and `git checkout` commands in IndexFile.remove() and Head.checkout(). An attacker able to control the path/pathspec argument passed to these methods can inject the `--pathspec-from-file` and `--pathspec-file-nul` options and read arbitrary files accessible to the process, with the file contents returned in GitCommandError.stderr.
Exploitation requires an application to pass untrusted, attacker-controlled input directly as the path/pathspec argument to these GitPython methods; in normal use these arguments are supplied by the application or developer rather than by a remote adversary. Red Hat products that bundle GitPython use it as an internal build and automation helper with developer-controlled arguments and do not expose these parameters to untrusted input, so the vulnerable code cannot be controlled by an adversary in those products, which are therefore not affected. The GitPython library packages shipped in Red Hat OpenStack Platform contain the vulnerable code; those affected streams are out of support scope for this fix. Red Hat rates the impact of this flaw as Moderate.
Applications using GitPython should not pass untrusted or attacker-controlled input directly as the path/pathspec argument to IndexFile.remove() or Head.checkout(), and should reject any such value beginning with a dash ("-") so that it cannot be interpreted as a git option. Updating GitPython to version 3.1.58 or later, which validates these options, resolves the issue.
Exploit Intelligence
Not affected
exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
Exploit Intelligence
Not affected
exploit-intelligence/vulnerability-analysis-rhel9
Migration Toolkit for Applications 8
Not affected
mta/mta-solution-server-rhel9
Pen Drive Powered by Red Hat Lightspeed
Not affected
pen-drive/pen-drive-scanner-rhel9
Red Hat AI Inference Server
Not affected
rhaiis/vllm-cpu-rhel9
Red Hat AI Inference Server
Not affected
rhaiis/vllm-tpu-rhel9
Red Hat Ansible Automation Platform 2
Out of support scope
ansible-automation-platform-24/controller-rhel8
Red Hat Ansible Automation Platform 2
Out of support scope
ansible-automation-platform-24/hub-rhel8
Red Hat Ansible Automation Platform 2
Out of support scope
ansible-automation-platform-25/controller-rhel8
Red Hat Ansible Automation Platform 2
Not affected
ansible-automation-platform-25/hub-rhel8
Red Hat Ansible Automation Platform 2
Fix deferred
ansible-automation-platform-26/controller-rhel9
Red Hat Ansible Automation Platform 2
Not affected
ansible-automation-platform-26/hub-rhel9
Red Hat Ansible Automation Platform 2
Fix deferred
ansible-automation-platform-27/controller-rhel9
Red Hat Ansible Automation Platform 2
Fix deferred
ansible-automation-platform-27/hub-rhel9
Red Hat Ansible Automation Platform 2
Fix deferred
python3.11-gitpython
Red Hat Ansible Automation Platform 2
Out of support scope
python3.12-gitpython
Red Hat Ansible Automation Platform 2
Out of support scope
python3x-gitpython
Red Hat Ansible Automation Platform 2
Out of support scope
python-gitpython
Red Hat Enterprise Linux AI (RHEL AI) 3
Not affected
rhelai3/bootc-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Not affected
rhelai3/bootc-gaudi-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Not affected
rhelai3/bootc-rocm-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Not affected
rhelai3/disk-image-cuda-rhel9
Red Hat Hardened Images
Not affected
llvm
Red Hat Hardened Images
Not affected
llvm21
Red Hat Hardened Images
Not affected
rust
Red Hat Hardened Images
Not affected
swift-lang
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-feature-server-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-mlflow-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-th06-cpu-torch210-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-th06-cpu-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-th06-cuda130-torch210-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-th06-cuda130-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-th06-rocm64-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-th-torch-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-th-torch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-th-torch-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-training-cuda128-torch29-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-trustyai-nemo-guardrails-server-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9
Red Hat OpenStack Platform 16.2
Out of support scope
GitPython
Red Hat OpenStack Platform 16.2
Not affected
rhosp-rhel8/openstack-mistral-api
Red Hat OpenStack Platform 16.2
Not affected
rhosp-rhel8/openstack-mistral-base
Red Hat OpenStack Platform 16.2
Not affected
rhosp-rhel8/openstack-mistral-engine
Red Hat OpenStack Platform 16.2
Not affected
rhosp-rhel8/openstack-mistral-event-engine
Red Hat OpenStack Platform 16.2
Not affected
rhosp-rhel8/openstack-mistral-executor
Red Hat OpenStack Platform 16.2
Not affected
rhosp-rhel8/openstack-nova-scheduler
Red Hat OpenStack Platform 16.2
Not affected
rhosp-rhel8/openstack-tripleoclient
Red Hat OpenStack Platform 17.1
Out of support scope
GitPython
Red Hat Satellite 6
Fix deferred
python3.12-gitpython
Red Hat Satellite 6
Fix deferred
python-gitpython
Red Hat Satellite 6
Fix deferred
satellite/iop-vmaas-rhel9
Red Hat Satellite 6
Fix deferred
satellite/iop-vulnerability-engine-rhel9
https://www.cve.org/CVERecord?id=CVE-2026-76217
https://nvd.nist.gov/vuln/detail/CVE-2026-76217
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hh9p-6wh2-4mfc
https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-read-via-pathspec-from-file