PT-2026-35269 · Intina47 · Context-Sync

Mida · Published 2026-04-26 · Updated 2026-04-26 · CVE-2026-7062

NVD

CVSS v2.0

7.5

High

AV:N/AC:L/Au:N/C:P/I:P/A:P

A security vulnerability has been detected in Intina47 context-sync up to 2.0.0. This affects an unknown part of the file src/git-integration.ts of the component Git Integration. Such manipulation leads to os command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

Exploit

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

CVE-2026-7062

Affected Products

Context-Sync

References · 7

• 🔥 https://github.com/wing3e/public_exp/issues/22 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7062 · Security Note
• https://vuldb.com/vuln/359637 · Note
• https://github.com/Intina47/context-sync · Note
• https://vuldb.com/submit/798614 · Note
• https://vuldb.com/vuln/359637/cti · Note
• https://github.com/Intina47/context-sync/issues/31 · Note