A vulnerability described as critical has been identified in GitHub copilot-cli up to 0.0.422. Impacted is an unknown function. Such manipulation leads to os command injection.
This vulnerability is listed as CVE-2026-29783. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is recommended.
