---
id: CVE-2026-114145
title: >-
  GitPython: GitPython: arbitrary code execution via improper submodule path
  validation (CVE-2026-114145)
summary: >-
  A flaw was found in GitPython. This vulnerability allows an attacker to
  achieve arbitrary code execution by supplying an untrusted submodule path.
  Because the library fails to properly validate destination paths before
  cloning repository d…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'
cvssSource: vendor
cwe:
  - CWE-73
  - CWE-696
vendor: Red Hat
product: Red Hat OpenShift AI (RHOAI)
affected:
  - exploit_intelligence
  - ai_inference_server
  - ansible_automation_platform 2
  - enterprise_linux_ai_rhel_ai 3
  - openshift_ai_rhoai
  - openstack_platform_13_queens
  - openstack_platform 16.2
  - openstack_platform 17.1
  - satellite 6
patched:
  - gitpython 3.2.1
published: '2026-10-21'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T17:24:08+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114145.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114145.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-114145'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2558563'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-114145'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-114145'
  - url: >-
      https://github.com/gitpython-developers/GitPython/commit/97eadb888d2f99567e3113f4e455be4ca128f697
  - url: 'https://github.com/gitpython-developers/GitPython/pull/2264'
  - url: 'https://github.com/gitpython-developers/GitPython/releases/tag/3.2.1'
  - url: >-
      https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-83vg-56qc-22m7
  - url: 'https://github.com/gitpython-developers/GitPython'
  - url: 'https://github.com/advisories/GHSA-83vg-56qc-22m7'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
  - osv
  - pip
  - ghsa
epss: 0.0035
epssPercentile: 0.28465
aliases:
  - GHSA-83vg-56qc-22m7
ecosystem: pip
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-23T14:54:12.373636Z'
ingestedAt: '2026-10-21T21:13:32.887Z'
---

## Overview

A flaw was found in GitPython. This vulnerability allows an attacker to achieve arbitrary code execution by supplying an untrusted submodule path. Because the library fails to properly validate destination paths before cloning repository data, an attacker can plant a malicious executable script into sensitive directories, such as the Git hooks folder. Subsequent Git operations then trigger the planted script, executing commands in the context of the running application.

## Vendor advisories

- **Red Hat VEX** · Important · affected: Exploit Intelligence, Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI), Red Hat OpenStack Platform 13 (Queens), … · no fix planned: Exploit Intelligence, Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux AI (RHEL AI) 3, … · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114145.json)

**GitPython: GitPython: arbitrary code execution via improper submodule path validation** — rated Important by Red Hat. Released 2026-10-21, updated 2026-10-23.

Affected:

- Exploit Intelligence
- Red Hat AI Inference Server
- Red Hat Ansible Automation Platform 2
- Red Hat Enterprise Linux AI (RHEL AI) 3
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenStack Platform 13 (Queens)
- Red Hat OpenStack Platform 16.2
- Red Hat OpenStack Platform 17.1
- Red Hat Satellite 6

No fix planned:

- Exploit Intelligence
- Red Hat AI Inference Server
- Red Hat Ansible Automation Platform 2
- Red Hat Enterprise Linux AI (RHEL AI) 3
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenStack Platform 13 (Queens)
- Red Hat OpenStack Platform 16.2
- Red Hat OpenStack Platform 17.1
- Red Hat Satellite 6

Not affected:

- Red Hat OpenShift AI (RHOAI)

## Remediation

Affected

Workarounds / mitigations:

- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

## Package advisory (CVE-2026-114145)

Affected packages:

- `gitpython < 3.2.1`

Patched in:

- `gitpython 3.2.1`

Source: https://osv.dev/vulnerability/GHSA-83vg-56qc-22m7