CVE-2026-67322
Description
GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from(). The caller-supplied remote URL is passed through Git.polish_url(), which on non-Cygwin platforms calls os.path.expandvars() on the URL before invoking git clone. An attacker who controls the clone URL can embed $NAME or ${NAME} tokens that are expanded to the values of the hosting process's environment variables (e.g., AWS_SECRET_ACCESS_KEY or GITHUB_TOKEN). The resulting URL, now containing the secret, is transmitted over the network to an attacker-controlled host during the clone attempt, disclosing the secret.
How to fix
- gitpython_project gitpython3.1.52 or later
- gitpython3.1.52 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gitpython_project gitpython | v < 3.1.52 | 3.1.52 |
| gitpythonPyPI | v < 3.1.52 | 3.1.52 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.