CVE-2026-76218

Red Hat Ansible Automation Platform (automation-controller): Mehrere Schwachstellen

Debian Linux, Red Hat Enterprise Linux, IBM QRadar SIEM, Red Hat Ansible Automation Platform

GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template parameter pointing to a directory with malicious git hooks that execute arbitrary code when git operations are performed on the initialized repository.

19. Aug 2026

Ausgewertete Quellen

• Debian
  DSA-6594-1 python-git - security update
• Hinweis
  https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-repo-init
• CERT-Bund
  WID-SEC-2026-3555
• NVD
  CVE-2026-76218
• GitHub
  https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-9rj7-rf2p-w77r