@grackle-ai/cli (>=0.82.2, <=0.132.1), @grackle-ai/powerline (>=0.82.2, <=0.132.1) +6 more potentially affected by unknown CVE via @grackle-ai/runtime-sdk (>=0.82.2, <=0.132.1)

@grackle-ai/runtime-sdk NPM version =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-VV65-F55V-XM6G...

@grackle-ai/cli (>=0.82.2, <=0.132.2), @grackle-ai/powerline (>=0.82.2, <=0.132.2) +6 more potentially affected by unknown CVE via @grackle-ai/runtime-sdk (>=0.82.2, <=0.132.2)

@grackle-ai/runtime-sdk NPM version =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.132.2 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIRUNTIMESDK-17817938...

PT-2026-57602

Summary The default git executor used for all worktree operations spawns git through a shell, and the untrusted task branch name flows into the command unsanitized. A caller able to reach the PowerLine SpawnSession RPC a malicious or compromised agent acting through the orchestration layer, or an...