PT-2026-23732 · Github · Github Copilot Cli

Published 2026-03-06 · Updated 2026-03-16 · CVE-2026-29783

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GitHub Copilot CLI versions prior to 0.0.423

Description The shell tool within GitHub Copilot CLI is susceptible to arbitrary code execution through crafted bash parameter expansion patterns. An attacker influencing commands executed by the agent, via prompt injection through repository files, MCP server responses, or user instructions, can exploit bash parameter transformation operators to execute hidden commands, bypassing the safety assessment intended to classify commands as read-only. Specifically, the patterns ${var@P}, ${var=value} / ${var:=value}, ${!var}, and nested $(cmd) or <(cmd) inside ${...} expansions are dangerous. Exploitation could lead to data exfiltration, file modification, or system compromise.

Recommendations Update GitHub Copilot CLI to version 0.0.423 or later.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-29783

GHSA-G8R9-G2V8-JV6F

Affected Products

Github Copilot Cli

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/29xxx/CVE-2026-29783.json · Exploit
• https://github.com/github/copilot-cli/security/advisories/GHSA-g8r9-g2v8-jv6f · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g8r9-g2v8-jv6f · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-29783 · Security Note
• https://osv.dev/vulnerability/CVE-2026-29783 · Vendor Advisory
• https://github.com/github/copilot-cli · Note
• https://github.com/github/copilot-cli/releases/tag/v0.0.423 · Note
• https://twitter.com/CVEnew/status/2029975478300508450 · Twitter Post
• https://twitter.com/sq1_security/status/2033446334674694358 · Twitter Post
• https://twitter.com/vuldb/status/2030170631678075367 · Twitter Post
• https://t.me/CVEtracker/46626 · Telegram Post