Dashboard / CVE-2026-69097

CVE-2026-69097

HIGH
MEDIUM Priority: 0.02 BB Relevance: 30/100
Published: 2026-08-03 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

No Auth Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: None
UI: Passive
S: X
AT: Present
VC: High
VI: High
VA: High

Description

GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names. Attackers can inject core.sshCommand or other dangerous config keys into the victim's .git/config via create_submodule or clone_from operations, achieving remote code execution when git performs ssh operations.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
gitpython_project gitpython < 3.1.53

References & Advisories (2)

Bug Bounty Relevance

30 / 100
✓ No authentication

CVSS Score

7.3 / 10.0 v4.0
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.27%
Raw Score 0.002680
Percentile 18.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00268
2026-10-28
0.00268

Intelligence Sources

nvd ref →

External Links