Description

A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git-diff Endpoint. Executing a manipulation of the argument args can lead to command injection. Upgrading to version 1.9.1 mitigates this issue. This patch is called e0729dcfd3a2b1682a7bff86e7174852c03419ba. It is advisable to upgrade the affected component.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.5",
  "pubDate": "2026-08-08T08:16:51.390Z",
  "pubdate": "2026-08-08T08:16:51.390Z",
  "executiveSummary": "A command injection vulnerability has been identified in the Kirachon context-engine product, specifically affecting versions up to 1.9.0. This security flaw originates from the improper handling of input parameters passed to underlying system commands within the review-git-diff endpoint.\nSuccessful exploitation of this vulnerability allows an attacker to execute arbitrary system commands with the privileges of the application process. This can lead to severe security implications, including complete system compromise, unauthorized data access, and lateral movement within the hosting environment.\nThe vulnerability resides in the function execGitCommand located in the file src/mcp/utils/gitUtils.ts. Exploitation requires an attacker to successfully manipulate the argument args passed to the vulnerable function, which subsequently processes the untrusted input without adequate sanitization or safe execution paradigms.\nOrganizations utilizing the affected software are at high risk if exposed to untrusted user input targeting the review-git-diff endpoint. Immediate remediation is required to eliminate the potential for remote code execution.",
  "technicalDetails": "The vulnerability is classified as a command injection flaw occurring within the execGitCommand function inside the source file src/mcp/utils/gitUtils.ts of the Kirachon context-engine component review-git-diff.\nThe root cause of the vulnerability stems from the direct or improperly validated incorporation of the args argument into system shell execution routines. When untrusted input is supplied to the args parameter, it fails to undergo rigorous sanitization, neutralization, or escaping mechanisms to prevent command interpretation.\nThe attack flow begins when an external entity or API consumer interacts with the review-git-diff endpoint. The request provides malicious input designed to manipulate the args parameter. Because the application passes this parameter directly into the git execution utility without enforcing strict parameter separation or utilizing safe API wrappers that prevent shell interpretation, the underlying operating system shell parses the injected control characters or command separators.\nConsequently, the execution flow deviates from invoking the intended Git operation to concurrently running attacker-supplied system binaries or shell scripts. Depending on the operational context and permissions of the process executing the Kirachon context-engine, this results in arbitrary command execution on the host system.\nAffected systems comprise all versions of Kirachon context-engine up to version 1.9.0. The vulnerability is successfully addressed and patched in version 1.9.1 via the implementation of commit e0729dcfd3a2b1682a7bff86e7174852c03419ba, which rectifies the unsafe argument handling mechanism within the codebase."
}