CVE-2026-44243 - Vulnerability Analysis

Overview

GitPython < 3.1.48 contains a path traversal caused by insufficient validation of reference paths in reference creation, rename, and delete operations, letting attackers write, overwrite, move, or delete files outside the .git directory, exploit requires attacker to supply crafted reference paths.

Severity & Score

Impact

Attackers can modify or delete files outside the repository, potentially leading to data loss or system compromise.

Mitigation

Update to version 3.1.48 or later.

References

• https://github.com/gitpython-developers/GitPython/releases/tag/3.1.48
• https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7545-fcxq-7j24

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner