Skip to content
OpenAdvisories

Product · GitHub

copilot-cli

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-45033

    GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor

    GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified in GitHub Copilot CLI where a malicious bare git repository nested inside a project directory can achieve arbit…

    GitHub copilot-cli @github/copilot npm
  • High 7.5
    CVE-2026-29783

    GitHub Copilot CLI allows for dangerous shell expansion patterns that enable arbitrary command execution

    The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns. An attacker who can influence the commands executed by the agent (e.g., via prompt injection…

    GitHub copilot-cli @github/copilot npm