Medium severity6.5NVD Advisory· Published Aug 25, 2026
CVE-2026-78679
CVE-2026-78679
Description
GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create() where a positional reference parameter bypasses the unsafe option guard. Attackers can supply a reference value like --file= to read arbitrary files, with contents returned in the annotated tag message.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <3.1.59
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.