https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 10:37:43 +0000 https://vulnerability.circl.lu/vuln/cve-2026-73624 <p><strong>Affected:</strong> gitpython-developers GitPython</p> <p>GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level.</p> <p><strong>Affected:</strong> gitpython-developers GitPython</p> <p>GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level.</p> https://vulnerability.circl.lu/vuln/cve-2026-73624 https://vulnerability.circl.lu/vuln/ghsa-fjr4-x663-mwxc <p><strong>Affected:</strong> PyPI: GitPython</p> <p>## Summary `Diffable.diff()` forwards `**kwargs` straight into `diff`/`diff_tree` with **no** `check_unsafe_options` guard. `Diffable` is mixed into `Commit`, `Tree`, `IndexFile`, and `Submodule`, giving a broad surface. `git diff --output=&lt;path&gt;` writes real patch content to an attacker-chosen path, enabling arbitrary file overwrite.</p> <p>## Root Cause `diff.py:188-283` builds and runs the diff command with no `check_unsafe_options` anywhere in the method (grep-confirmed). Additionally `diff.py:265` does `args.insert(0, other)`, placing the caller-supplied `other` ref BEFORE the `--` separator, so a value of `--output=/path` is parsed by git as an option — a value-only control path requiring no kwarg key.</p> <p>## Impact Overwrite/corrupt any file at process privilege with attacker-chosen path (e.g. `~/.ssh/authorized_keys`, configs, lockfiles). Content is real diff/patch bytes (attacker-influenced). Per the skill&#39;s rule, controlling WHICH file is overwritten = I:H regardless of content constraints.</p> <p>## Proof of Concept ```python # Key-control: commit.diff(other_commit, output=&#39;/home/app/.ssh/authorized_keys&#39;) # victim overwritten with diff (105 bytes verified) # Value-control (attacker controls only the ref string): commit.diff(other=&#39;--output=/home/app/.ssh/authorized_keys&#39;) # 14-byte victim -&gt; 146 bytes of diff-tree output ```</p> <p>## Attack Chain 1. Entry (value-control): `commit.diff(other=&lt;user ref&gt;)` with `other = &#34;--output=/home/app/.ssh/authorized_keys&#34;`. Guard: none…</p> <p><strong>Affected:</strong> PyPI: GitPython</p> <p>## Summary `Diffable.diff()` forwards `**kwargs` straight into `diff`/`diff_tree` with **no** `check_unsafe_options` guard. `Diffable` is mixed into `Commit`, `Tree`, `IndexFile`, and `Submodule`, giving a broad surface. `git diff --output=&lt;path&gt;` writes real patch content to an attacker-chosen path, enabling arbitrary file overwrite.</p> <p>## Root Cause `diff.py:188-283` builds and runs the diff command with no `check_unsafe_options` anywhere in the method (grep-confirmed). Additionally `diff.py:265` does `args.insert(0, other)`, placing the caller-supplied `other` ref BEFORE the `--` separator, so a value of `--output=/path` is parsed by git as an option — a value-only control path requiring no kwarg key.</p> <p>## Impact Overwrite/corrupt any file at process privilege with attacker-chosen path (e.g. `~/.ssh/authorized_keys`, configs, lockfiles). Content is real diff/patch bytes (attacker-influenced). Per the skill&#39;s rule, controlling WHICH file is overwritten = I:H regardless of content constraints.</p> <p>## Proof of Concept ```python # Key-control: commit.diff(other_commit, output=&#39;/home/app/.ssh/authorized_keys&#39;) # victim overwritten with diff (105 bytes verified) # Value-control (attacker controls only the ref string): commit.diff(other=&#39;--output=/home/app/.ssh/authorized_keys&#39;) # 14-byte victim -&gt; 146 bytes of diff-tree output ```</p> <p>## Attack Chain 1. Entry (value-control): `commit.diff(other=&lt;user ref&gt;)` with `other = &#34;--output=/home/app/.ssh/authorized_keys&#34;`. Guard: none…</p> https://vulnerability.circl.lu/vuln/ghsa-fjr4-x663-mwxc