GitPython before 3.1.58 contains a command execution flaw in the check_unsafe_options guard. By combining a single-character keyword argument with split_single_char_options=False, the guard can be bypassed. Attacker‑provided kwargs to guarded methods such as clone_from lead to a token that is parsed as the --upload-pack option, enabling arbitrary OS command execution when allow_unsafe_options remains False.

The vulnerability affects the GitPython library distributed by gitpython-developers. All releases prior to version 3.1.58 are vulnerable. The fix is delivered in version 3.1.58 and later.

This flaw carries a CVSS score of 8.7, indicating a high severity remote code execution identified as CWE-78 and CWE-88. Its EPSS score is 0.00463 (<1%), indicating a very low probability of exploitation in the wild, and the vulnerability is not yet listed in CISA's KEV catalog. The exploitation requires the attacker to supply crafted input to a guarded method, so impact surfaces when the library is used with untrusted data or in environments where an attacker can influence the keyword arguments. Based on the description, it is inferred that the likely attack vector is control over kwargs passed to guarded methods.