Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-73620

GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 25.7%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-73620


Contact Us

Shodan ® - All rights reserved