github copilot command line interface vulnerabilities (CVE)

CVE records published for github copilot command line interface, newest first. Follow to get an email when a new one appears.

1 results

7.5High

CVE-2026-29783 8 months ago

GitHub Copilot CLI allows for dangerous shell expansion patterns that enable arbitrary command execution

github copilot-cli

The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns. An attacker who can influence the commands executed by the agent (e.g., via prompt injection…