Skip to content
Threat Feed
Subscribe

Product

Github Copilot-Cli (< 1.0.43)

1 brief RSS
high advisory

GitHub Copilot CLI: Nested Bare Repository RCE via Git Configuration

GitHub Copilot CLI versions prior to 1.0.43 are vulnerable to arbitrary code execution via a malicious bare git repository nested within a project directory, exploiting git's automatic bare repository discovery and the `core.fsmonitor` configuration setting.

PoC Copilot CLI +1 git rce github code execution
2r 1t 1c updated