AIKIDO-2026-82046

TL;DR

The pop() function in dulwich/stash.py uses os.path.exists() to check for a parent directory before writing stashed files, and that check follows symlinks. When an intermediate directory in a stashed path is a symlink pointing outside the worktree, the subsequent file writes resolve through the link. An attacker who convinces a victim to pop a stash inside a malicious repository can write attacker-controlled content to arbitrary filesystem locations such as .git/hooks/post-checkout, achieving remote code execution on the next git operation. The fix verifies that no component of the target path resolves through a symlink outside the repository before writing.