CVE-2026-76219: GitPython Path Traversal Vulnerability

CVE-2026-76219 Overview

CVE-2026-76219 is an argument injection vulnerability [CWE-88] affecting GitPython versions before 3.1.58. The flaw resides in the IndexFile.from_tree, IndexFile.reset, and IndexFile.merge_tree methods. These methods append caller-influenced treeish strings to git read-tree without option validation or argument separation.

Attackers who control treeish input can inject the --index-output option. This causes git read-tree to write a valid git-index blob to any attacker-specified writable path. The result is arbitrary file overwrite, destroying existing content at the target location.

Critical Impact
Attackers with control over treeish arguments can overwrite arbitrary files on disk at any path writable by the process, leading to data destruction and potential downstream code execution through overwrite of configuration or script files.

Affected Products

GitPython versions before 3.1.58
Applications using IndexFile.from_tree, IndexFile.reset, or IndexFile.merge_tree with untrusted input
Python projects, CI/CD pipelines, and automation tooling that wrap GitPython

Discovery Timeline

2026-08-19 - CVE-2026-76219 published to the National Vulnerability Database (NVD)
2026-08-20 - Last updated in NVD database

Technical Details for CVE-2026-76219

Vulnerability Analysis

GitPython is a Python library that wraps the git command-line binary. Several IndexFile methods construct git read-tree invocations by concatenating caller-supplied treeish strings directly into the argument list. The library does not validate that these values are not options, and it does not insert the -- end-of-options separator.

Because git read-tree accepts --index-output=<path>, an attacker who supplies a treeish that begins with --index-output= can redirect the resulting index blob to an arbitrary filesystem path. The written data is a valid git-index binary structure, so any existing file at that path is overwritten and corrupted.

This pattern is a textbook case of improper neutralization of argument delimiters, classified under CWE-88. Impact scales with the privileges of the process running GitPython, making service accounts, CI runners, and developer workstations high-value targets.

Root Cause

The underlying defect is missing argument separation. The affected methods interpolate caller-controlled treeish values into the git read-tree command line without prepending --, and without rejecting strings that begin with a hyphen. Any attacker-controlled string is treated as a Git option.

Attack Vector

Exploitation requires an application that passes untrusted input to IndexFile.from_tree, IndexFile.reset, or IndexFile.merge_tree. An attacker supplies a treeish such as --index-output=/path/to/target to redirect index output. Additional trees supplied to the call provide the blob content written to the chosen path. Full technical detail is available in the GitHub Security Advisory GHSA-4gmw-gg2m-w46p and the VulnCheck Advisory.

Detection Methods for CVE-2026-76219

Indicators of Compromise

Unexpected files containing binary git-index headers (DIRC magic bytes) at non-repository paths
Presence of --index-output substrings in process command lines spawned by Python processes
Corruption or replacement of configuration files, cron entries, or scripts writable by the GitPython host process
Application logs showing IndexFile.from_tree, IndexFile.reset, or IndexFile.merge_tree calls with hyphen-prefixed treeish values

Detection Strategies

Inventory Python dependencies and flag any environment resolving GitPython to a version earlier than 3.1.58
Add static analysis rules that identify user-controlled input flowing into the three affected IndexFile methods
Inspect audit logs of git subprocess invocations for arguments beginning with --index-output
Alert on unexpected file writes performed by Python or CI worker processes outside their working directory

Monitoring Recommendations

Enable process command-line auditing (execve on Linux, Sysmon Event ID 1 on Windows) for git executions and forward to a central log store
Monitor file integrity on sensitive paths writable by service accounts running GitPython, including ~/.ssh, crontab, and application configuration directories
Track outbound calls to git read-tree originating from web servers, CI runners, or automation frameworks

How to Mitigate CVE-2026-76219

Immediate Actions Required

Upgrade GitPython to version 3.1.58 or later across all environments
Audit application code for calls to IndexFile.from_tree, IndexFile.reset, and IndexFile.merge_tree that accept external input
Reject any treeish value that begins with - before passing it to GitPython APIs
Run GitPython-based services under least-privilege accounts to limit the scope of overwritable files

Patch Information

The vulnerability is fixed in GitPython 3.1.58. The maintainers introduced argument separation and option validation in the affected IndexFile methods. Details are documented in the GitHub Security Advisory GHSA-4gmw-gg2m-w46p.

Workarounds

Validate every treeish argument against an allowlist of hex commit SHAs or known ref names
Reject inputs matching the pattern ^- before invoking any GitPython index method
Wrap GitPython calls in a sandboxed process with a read-only filesystem outside the repository working directory
Isolate untrusted repository processing inside ephemeral containers with no access to sensitive host paths

bash

# Upgrade GitPython to the patched release
pip install --upgrade 'GitPython>=3.1.58'

# Verify installed version
python -c "import git; print(git.__version__)"