CVE-2026-110860

Red Hat Product Security rates this GitPython flaw as Moderate. The Submodule.move() function of GitPython validates its destination path only lexically and does not resolve symbolic links in intermediate path components. An attacker can commit a symbolic link pointing outside the working tree into an untrusted repository; when an application that has cloned or opened such a repository moves an initialized submodule beneath that symlink, GitPython follows the link and relocates the submodule checkout to an attacker-influenced location outside the working tree, writing files outside the intended directory and corrupting repository metadata such as the index and .gitmodules. Exploitation requires local processing of a crafted repository with user interaction and no prior privileges; the impact is limited to high integrity impact and low availability impact within the privileges of the process running GitPython, with no direct confidentiality impact (CVSS 6.1, AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L), consistent with the upstream CVSS 3.1 severity. GitPython is shipped in multiple Red Hat offerings, including Red Hat OpenStack Platform, Red Hat Ansible Automation Platform, Red Hat Enterprise Linux AI, and Red Hat Insights. The currently recorded affected components are either in streams that fall outside Red Hat's full support scope (resolved as out of support scope) or deferred, because Red Hat does not file trackers for Moderate-severity flaws whose CVSS score is below 7.0. For the deferred components the fix is postponed to a future release; the residual risk is that an application processing an attacker-controlled repository could relocate files outside the intended working directory.