High [CVE-2026-67324] Arbitrary Code Execution via Joined Short Options Bypass

GitPython 3.1.50 fails to recognize joined short-option forms such as -u (the short form of --upload-pack=) when enforcing its default unsafe-option gate.

When an application passes attacker-influenced clone options into Repo.clone_from(..., multi_options=..., allow_unsafe_options=False), an attacker can supply -u to bypass the gate that blocks --upload-pack/-u, causing Git to execute the specified helper command during clone. Fixed in 3.1.51.

A flaw was found in GitPython. This allows the attacker to bypass security checks and execute arbitrary commands during a Git clone operation.

This can lead to a complete compromise of the affected system. This vulnerability is rated as Important because exploitation requires an application to invoke `Repo.clone_from()` with attacker-controlled `multi_options` while `allow_unsafe_options=False` is set.

This precondition means an attacker must already have some influence over a Git-related workflow within the consuming application, rather than exploiting it through mere network access. This affects GitPython version 3.1.50.

Red Hat severity: Important — CVSS 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Weakness: CWE-78.