CVE-2026-45033

The record

GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified in GitHub Copilot CLI where a malicious bare git repository nested inside a project directory can achieve arbitrary code execution when the agent performs git operations. By exploiting git's automatic bare repository discovery during directory traversal, an attacker can set core.fsmonitor or other executable config keys to run arbitrary commands without user awareness or approval. The vulnerability arises because git's core.fsmonitor config key (and 15+ similar keys such as core.hookspath, diff.external, merge.tool, etc.) can specify arbitrary shell commands that git will execute as part of normal operations like status, diff, or rev-parse. This vulnerability is fixed in 1.0.43.

Affected packages

Related vulnerabilities

• GHSA-9ccr-r5hg-74gf GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via… Same vulnerability
• CVE-2026-29783 The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can… Also affects @github/copilot
• GHSA-g8r9-g2v8-jv6f GitHub Copilot CLI Dangerous Shell Expansion Patterns Enable Arbitrary Code Execution Also affects @github/copilot
• CVE-2026-59305 Partition interceptor may be improperly added while sending message. CWE-696
• CVE-2026-68930 Russh is a Rust SSH client & server library. CWE-696
• CVE-2026-67217 cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in… CWE-696
• CVE-2026-56355 GNU Savannah Administration Savane through 3.17 uses untrusted data as part of… CWE-696
• CVE-2026-49317 Incorrect behavior order in the Infotainment / Digital Round display of the Indian… CWE-696