Skip to content
Threat Feed

Product

Copilot CLI (<= 1.0.42)

1 brief RSS
high advisory

GitHub Copilot CLI: Nested Bare Repository RCE via Git Configuration

GitHub Copilot CLI versions prior to 1.0.43 are vulnerable to arbitrary code execution via a malicious bare git repository nested within a project directory, exploiting git's automatic bare repository discovery and the `core.fsmonitor` configuration setting.

Copilot CLI git rce github code execution
2r 1t