CVE-2026-73622 | gitpython-developers GitPython up to 3.1.54 URL Remote.create/Submodule.add os command injection

August 13, 2026 Yanac

A vulnerability labeled as problematic has been found in gitpython-developers GitPython up to 3.1.54. This vulnerability affects the function Remote.create/Submodule.add of the component URL Handler. Executing a manipulation can lead to os command injection.

This vulnerability is tracked as CVE-2026-73622. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More