GitPython EUVD-2026-101743

Exploitation requires that the victim application use GitPython (3.1.62 up to but not including 3.2.0) and specifically invoke Submodule.move() on an already-initialized submodule within a repository the attacker controls, where the attacker has committed a symbolic link in an intermediate destination path component that resolves outside the worktree. Limiting factors: it is local-only (AV:L) with no network path, demands passive user interaction (UI:P) in that the application must actively perform the move against untrusted content, and affects only the 3.1.62-3.2.0 version band; impact is limited to integrity/corruption of the checkout, index, and .gitmodules with no confidentiality loss. Applications that never call Submodule.move() on untrusted repositories are not exposed.

This is a moderate-severity integrity flaw, not a high-priority emergency. The provided CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L, base 6.9 MEDIUM) describes a local-vector issue requiring passive user interaction: the victim application must itself perform a Submodule.move() against an attacker-supplied repository. There is no network attack surface and no confidentiality impact (VC:N), which is consistent with CWE-59 (link following) rather than data disclosure. No EPSS score was supplied, the CVE is not on CISA KEV, and no public exploit was referenced, so the signals are internally consistent and all point to low real-world exploitation pressure: no public exploit identified at time of analysis. One cross-source conflict exists - the single input Tag is 'Information Disclosure,' which directly contradicts the CVSS (VC:N, VI:H) and the description; this is an integrity/path-relocation flaw, not information disclosure, so the tag should be treated as mislabeled. Net: a legitimate bug worth patching in CI/automation that processes untrusted repositories, but not an urgent, widely-weaponizable vulnerability.

An attacker publishes a malicious Git repository whose tree contains a submodule plus a symlink (e.g. a path component named 'vendor') that points outside the worktree. A victim CI pipeline or tool that clones this repository and uses GitPython's Submodule.move() to relocate an initialized submodule follows the symlink lexically, writing the submodule checkout to the attacker-chosen external location and corrupting the repository's index and .gitmodules. No public exploit code was identified in the provided sources.