Which versions of GitPilot-MCP are affected by CVE-2026-6980?

GitPilot-MCP contains a remote command injection vulnerability (CVE-2026-6980) that allows unauthenticated attackers to execute arbitrary system commands with limited privileges through the repo_path…

Is there a public PoC exploit available for CVE-2026-6980?

Yes, a public proof-of-concept exploit is available for CVE-2026-6980. Prioritise patching immediately. EPSS: 1.0%.

How to fix or mitigate CVE-2026-6980?

Within 24 hours: Identify all systems running GitPilot-MCP and isolate affected instances from production networks; inventory current deployment versions against commit 9ed9f153ba4158a2ad230ee4871b25130da29ffd. Within 7 days: Implement network segmentation to restrict access to GitPilot-MCP endpoints to authorized users only; deploy Web Application Firewall (WAF) rules to block repo_path function calls with suspicious input patterns. Within 30 days: Monitor vendor advisories for patch release; prepare upgrade testing plan for patched version upon availability; consider temporary decommissioning if business-critical functionality can be maintained through alternative tools.

GitPilot-MCP CVE-2026-6980

Q: What is the CVSS score of CVE-2026-6980?

CVE-2026-6980 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 1.0%.

EUVD-2026-25656 MEDIUM

Command Injection (CWE-77)

2026-04-25 VulDB

Command Injection Gitpilot Mcp

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:12 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

PoC Detected

Apr 29, 2026 - 01:00 vuln.today

Public exploit code

Severity Changed

Apr 25, 2026 - 14:22 NVD

HIGH MEDIUM

CVSS changed

Apr 25, 2026 - 14:22 NVD

7.3 (HIGH) 6.9 (MEDIUM)

Analysis Generated

Apr 25, 2026 - 14:00 vuln.today

EUVD ID Assigned

Apr 25, 2026 - 13:45 euvd

EUVD-2026-25656

Analysis Generated

Apr 25, 2026 - 13:45 vuln.today

CVE Published

Apr 25, 2026 - 13:00 nvd

MEDIUM 5.5

DescriptionCVE.org

A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repo_path of the file main.py. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Remote command injection in GitPilot-MCP allows unauthenticated attackers to execute arbitrary system commands via the repo_path function in main.py. The vulnerability affects all versions up to commit 9ed9f153ba4158a2ad230ee4871b25130da29ffd, with publicly available exploit code demonstrating practical exploitation. CVSS 7.3 (High) with network vector and no authentication required indicates significant exposure, though CVSS impact ratings (L/L/L) suggest attackers may have limited privileges in command execution context.

Technical ContextAI

This is a CWE-77 command injection vulnerability in the repo_path function within main.py of GitPilot-MCP, a tool that appears to integrate Git operations with Model Context Protocol (MCP) capabilities. Command injection occurs when user-supplied input in the 'command' argument is passed to system shell execution functions without proper sanitization or validation. The vulnerability allows attackers to break out of intended command syntax by injecting shell metacharacters (such as semicolons, pipes, or backticks) to execute arbitrary commands. The affected component processes repository paths, suggesting the injection point may occur during Git operations or file system interactions where command-line utilities are invoked with user-controllable path parameters.

RemediationAI

No vendor-released patch identified at time of analysis, as the maintainer did not respond to vulnerability disclosure. Organizations using GitPilot-MCP should immediately implement the following compensating controls: (1) Restrict network access to GitPilot-MCP instances using firewall rules or network segmentation, allowing access only from trusted internal networks or specific IP ranges (trade-off: breaks remote workflow automation). (2) Deploy GitPilot-MCP within containerized or sandboxed environments with minimal system privileges and restricted file system access to limit command injection impact (trade-off: may break legitimate file operations). (3) Implement application-layer input validation proxy or web application firewall rules to block common command injection patterns in repo_path parameters, filtering shell metacharacters like semicolons, pipes, backticks, and dollar signs (trade-off: may break legitimate repository paths with special characters). (4) Monitor system logs for unexpected child process execution or shell invocations from GitPilot-MCP processes. Given vendor non-responsiveness, evaluate migrating to actively maintained alternatives for Git automation. Full vulnerability details and exploit demonstration available at https://github.com/wing3e/public_exp/issues/38 and https://vuldb.com/vuln/359523/cti.