{"id":"CVE-2026-114145","title":"GitPython: GitPython: arbitrary code execution via improper submodule path validation (CVE-2026-114145)","summary":"A flaw was found in GitPython. This vulnerability allows an attacker to achieve arbitrary code execution by supplying an untrusted submodule path. Because the library fails to properly validate destination paths before cloning repository d…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvssSource":"vendor","cwe":["CWE-73","CWE-696"],"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","affected":["exploit_intelligence","ai_inference_server","ansible_automation_platform 2","enterprise_linux_ai_rhel_ai 3","openshift_ai_rhoai","openstack_platform_13_queens","openstack_platform 16.2","openstack_platform 17.1","satellite 6"],"patched":["gitpython 3.2.1"],"published":"2026-10-21","updated":"2026-10-23","sourceUpdated":"2026-10-23T17:24:08+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114145.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114145.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-114145"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558563"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-114145"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114145"},{"url":"https://github.com/gitpython-developers/GitPython/commit/97eadb888d2f99567e3113f4e455be4ca128f697"},{"url":"https://github.com/gitpython-developers/GitPython/pull/2264"},{"url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.2.1"},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-83vg-56qc-22m7"},{"url":"https://github.com/gitpython-developers/GitPython"},{"url":"https://github.com/advisories/GHSA-83vg-56qc-22m7"}],"tags":["csaf","vex","red-hat","cve.org","osv","pip","ghsa"],"epss":0.0035,"epssPercentile":0.28465,"aliases":["GHSA-83vg-56qc-22m7"],"ecosystem":"pip","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-23T14:54:12.373636Z"},"ingestedAt":"2026-10-21T21:13:32.887Z","slug":"CVE-2026-114145","body":"## Overview\n\nA flaw was found in GitPython. This vulnerability allows an attacker to achieve arbitrary code execution by supplying an untrusted submodule path. Because the library fails to properly validate destination paths before cloning repository data, an attacker can plant a malicious executable script into sensitive directories, such as the Git hooks folder. Subsequent Git operations then trigger the planted script, executing commands in the context of the running application.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Important · affected: Exploit Intelligence, Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI), Red Hat OpenStack Platform 13 (Queens), … · no fix planned: Exploit Intelligence, Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux AI (RHEL AI) 3, … · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114145.json)\n\n**GitPython: GitPython: arbitrary code execution via improper submodule path validation** — rated Important by Red Hat. Released 2026-10-21, updated 2026-10-23.\n\nAffected:\n\n- Exploit Intelligence\n- Red Hat AI Inference Server\n- Red Hat Ansible Automation Platform 2\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat OpenStack Platform 13 (Queens)\n- Red Hat OpenStack Platform 16.2\n- Red Hat OpenStack Platform 17.1\n- Red Hat Satellite 6\n\nNo fix planned:\n\n- Exploit Intelligence\n- Red Hat AI Inference Server\n- Red Hat Ansible Automation Platform 2\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat OpenStack Platform 13 (Queens)\n- Red Hat OpenStack Platform 16.2\n- Red Hat OpenStack Platform 17.1\n- Red Hat Satellite 6\n\nNot affected:\n\n- Red Hat OpenShift AI (RHOAI)\n\n## Remediation\n\nAffected\n\nWorkarounds / mitigations:\n\n- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\n## Package advisory (CVE-2026-114145)\n\nAffected packages:\n\n- `gitpython < 3.2.1`\n\nPatched in:\n\n- `gitpython 3.2.1`\n\nSource: https://osv.dev/vulnerability/GHSA-83vg-56qc-22m7","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}