Context Engine
Monthly
Command injection in Kirachon context-engine up to version 1.9.0 allows adjacent authenticated attackers to execute arbitrary OS commands through the review-git-diff MCP endpoint. The root cause is the execGitCommand function in src/mcp/utils/gitUtils.ts passing user-supplied git reference arguments - branch names, commit hashes, and path patterns - directly to a shell-invoked subprocess without sanitization, enabling shell metacharacter injection. No public exploit has been independently distributed, though the patch commit itself embeds proof-of-concept test cases confirming the injection vector; version 1.9.1 resolves the issue.
Command injection in Kirachon context-engine up to version 1.9.0 allows adjacent authenticated attackers to execute arbitrary OS commands through the review-git-diff MCP endpoint. The root cause is the execGitCommand function in src/mcp/utils/gitUtils.ts passing user-supplied git reference arguments - branch names, commit hashes, and path patterns - directly to a shell-invoked subprocess without sanitization, enabling shell metacharacter injection. No public exploit has been independently distributed, though the patch commit itself embeds proof-of-concept test cases confirming the injection vector; version 1.9.1 resolves the issue.