copilot-cli vulnerabilities

2 known vulnerabilities in copilot-cli from GitHub. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  copilot-cli: Incorrect Behavior Order

  CVE-2026-45033May 13, 2026GitHub

  GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified in GitHub Copilot CLI where a malicious bare git repository nested inside a project directory can achieve arbitr

• 7.8 High severity

  copilot-cli: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-29783Mar 6, 2026GitHub

  The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns. An attacker who can influence the commands executed by the agent (e.g., via prompt injection