Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:github:copilot-Cli:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

GitHub Copilot CLI: Nested Bare Repository RCE via Git Configuration

GitHub Copilot CLI versions prior to 1.0.43 are vulnerable to arbitrary code execution via a malicious bare git repository nested within a project directory, exploiting git's automatic bare repository discovery and the `core.fsmonitor` configuration setting.

PoC Copilot CLI +1 git rce github code execution
2r 1t 1c updated