CVE-2026-45033 Details
Description
GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified in GitHub Copilot CLI where a malicious bare git repository nested inside a project directory can achieve arbitrary code execution when the agent performs git operations. By exploiting git's automatic bare repository discovery during directory traversal, an attacker can set core.fsmonitor or other executable config keys to run arbitrary commands without user awareness or approval. The vulnerability arises because git's core.fsmonitor config key (and 15+ similar keys such as core.hookspath, diff.external, merge.tool, etc.) can specify arbitrary shell commands that git will execute as part of normal operations like status, diff, or rev-parse. This vulnerability is fixed in 1.0.43.
A vulnerability in GitHub Copilot CLI prior to version 1.0.43 allows for arbitrary code execution. This issue arises when a malicious bare git repository is nested inside a project directory. Exploitation occurs through git's automatic discovery of bare repositories during directory traversal, enabling an attacker to use executable configuration keys to run commands without user knowledge or consent. The vulnerability is present in versions of GitHub Copilot CLI through 1.0.42.
Users should upgrade GitHub Copilot CLI to version 1.0.43 or later. It is also advisable to review project directories for unexpected bare repositories, particularly in 'vendor' or 'third_party' directories, or deeply nested subdirectories.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/github/copilot-cli/security/advisories/GHSA-9ccr-r5hg-74gf | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/github/copilot-cli/security/advisories/GHSA-9ccr-r5hg-74gf | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-696 | Incorrect Behavior Order | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| github copilot-cli | < 1.0.43 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 2, 2026 | Initial Analysis | [email protected] |
| May 13, 2026 | CVE Modified | CISA-ADP |
| May 13, 2026 | New CVE Received | [email protected] |