Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2026/04/27 1:22 p.m.•19 views

CVE-2026-6980

A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repopath of the file main.py. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been...

7.5CVSS7AI score0.03181EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/25 2:16 p.m.•32 views

CVE-2026-6980

A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repopath of the file main.py. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been...

7.5CVSS0.03181EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/25 1:00 p.m.•58 views

CVE-2026-6980 Divyanshu-hash GitPilot-MCP main.py repo_path command injection

A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repopath of the file main.py. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been...

7.5CVSS0.03181EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/25 1:00 p.m.•46 views

CVE-2026-6980

CVE-2026-6980 concerns Divyanshu-hash GitPilot-MCP (up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd). The issue affects the repo_path function in main.py, where manipulation of the argument can lead to command injection. Exploitation is described as remote and is publicly disclosed. The descriptio...

7.5CVSS6.8AI score0.03181EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/04/25 1:00 p.m.•23 views

EUVD-2026-25656

A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repopath of the file main.py. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been...

7.5CVSS7.1AI score0.03181EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/25 1:00 p.m.•11 views

CVE-2026-6980

A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repopath of the file main.py. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been...

7.5CVSS7.1AI score0.03181EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/25 1:00 p.m.•13 views

CVE-2026-6980 Divyanshu-hash GitPilot-MCP main.py repo_path command injection

A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repopath of the file main.py. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been...

7.5CVSS6.8AI score0.03181EPSS
SaveExploits0References4
OSV
OSV
•added 2026/04/25 1:00 p.m.•2 views

CVE-2026-6980 Divyanshu-hash GitPilot-MCP main.py repo_path command injection

A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repopath of the file main.py. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been...

6.9CVSS5.7AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/25 12:00 a.m.•2 views

CVE-2026-6980: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repopath of the file main.py. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been...

7.5CVSS6.8AI score0.03181EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/25 12:00 a.m.•24 views

GitPilot MCP 注入漏洞

GitPilot MCP is an automated GitHub contribution intelligent proxy tool developed by Divyanshu Giri. The GitPilot MCP 9ed9f153ba4158a2ad230ee4871b25130da29ffd version previously had a injection vulnerability. This vulnerability stemmed from improper handling of the command parameter in the repopa...

7.5CVSS7.1AI score0.03181EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/25 12:00 a.m.•36 views

PT-2026-35150

A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repo path of the file main.py. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been...

7.5CVSS7.1AI score0.03181EPSS
SaveExploits0References5
Rows per page
Query Builder