---
id: CVE-2026-78675
title: >-
  GitPython before 3.1.59 fails to disable merge_includes when parsing
  .gitmodules, allowing attackers to disclose local file content by including
  arbitrary file paths via [include] directives
summary: >-
  GitPython before 3.1.59 fails to disable merge_includes when parsing
  .gitmodules, allowing attackers to disclose local file content by including
  arbitrary file paths via [include] directives. Attackers can craft a malicious
  .gitmodules f…
severity: high
cvss: 8.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-73
  - CWE-200
vendor: gitpython_project
product: gitpython
affected:
  - gitpython < 3.1.59
patched:
  - gitpython 3.1.59
published: '2026-08-25'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T15:10:00.207'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-78675'
references:
  - url: >-
      https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7833-fr7j-v32q
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/gitpython-before-local-file-content-disclosure-via-gitmodules
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7833-fr7j-v32q
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-78675'
  - url: 'https://github.com/gitpython-developers/GitPython/pull/2211'
  - url: >-
      https://github.com/gitpython-developers/GitPython/commit/ef7568e3b317ce617eacda39b8b54dcdff8c3b5c
  - url: 'https://github.com/gitpython-developers/GitPython'
  - url: 'https://github.com/gitpython-developers/GitPython/releases/tag/3.1.59'
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2026-3785.yaml
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-78675.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-78675'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2523214'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-78675'
  - url: 'https://github.com/advisories/GHSA-7833-fr7j-v32q'
tags:
  - nvd
  - cve.org
  - exploit-available
  - osv
  - pip
  - csaf
  - vex
  - red-hat
  - ghsa
  - score-dispute
epss: 0.00178
epssPercentile: 0.0729
aliases:
  - GHSA-7833-fr7j-v32q
  - PYSEC-2026-3785
ecosystem: pip
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-08-25T12:52:14.332502Z'
scores:
  nvd: 8.4
  cna: 8.4
  osv: 8.4
  vendor: 5.5
  ghsa: 8.4
ingestedAt: '2026-09-03T19:32:11.707Z'
---

## Overview

GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via [include] directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when repo.submodules is accessed, GitConfigParser raises MissingSectionHeaderError embedding the target file's first line verbatim in the exception message.

## Affected

- `gitpython < 3.1.59`

## Remediation

Upgrade past the affected range:

- `gitpython 3.1.59`

## Package advisory (CVE-2026-78675)

Affected packages:

- `gitpython < 3.1.59`

Patched in:

- `gitpython 3.1.59`

Source: https://osv.dev/vulnerability/GHSA-7833-fr7j-v32q

## Vendor advisories

- **Red Hat VEX** · Moderate · affected: Exploit Intelligence, Migration Toolkit for Applications 8, Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI), … · no fix planned: Exploit Intelligence, Migration Toolkit for Applications 8, Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, … · updated 2026-09-10 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-78675.json)