Copilot Command Line Interface vulnerabilities
1 known vulnerability in Copilot Command Line Interface from GitHub. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest first
- 7.8 High severity
copilot-cli: Improper Neutralization of Special Elements used in an OS Command
The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns. An attacker who can influence the commands executed by the agent (e.g., via prompt injection