CVE-2026-45033: GitHub Copilot CLI Arbitrary Code Execution
GitHub Copilot CLI
A security vulnerability in GitHub Copilot CLI prior to version 1.0.43 allows a malicious bare git repository to achieve arbitrary code execution. The issue arises during automatic bare repository discovery when performing git operations.
disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why
- CVSS
- 8.5
- EPSS
- <0.01 · top 71% · 2026-11-13
- fix status
- Fix status unknown
- first report
- 13 May 2026
- last update
- 13 May 2026
- CVE ids
Timeline · 1
Sources · 1
Advisories and databases
- 2026-05-13CVE-2026-45033: GitHub Copilot CLI brings AI-powered coding assistance directly to your command line.NVD · nvd.nist.gov/vuln/detail/CVE-2026-45033
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- Attack on AI
- categories
- Infrastructure vulnerability
- severity
- 2 · Disclosed vulnerability
- fix status
- Fix status unknown
- targets
- Microsoft, Framework / tooling
- owasp llm top 10
- LLM03:2025 Supply Chain
- mitre atlas
- no technique for these categories
- dates
- happened 13 May 2026 · first reported 13 May 2026
- origin
- NVDVulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
- record
- confidence 0.90 · created 2026-10-18 10:04Z · updated 2026-10-18 10:04Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# CVE-2026-45033: GitHub Copilot CLI Arbitrary Code Execution https://gcdradar.vercel.app/incidents/cve-2026-45033-github-copilot-cli-arbitrary-code-execution · AIR-2026-1072 · closed 2026-05-13 - Lane: Patch now - Severity: 2 (Disclosed vulnerability) - Fix status: Fix status unknown - First reported: 2026-05-13 - AI role: Attack on AI - Products: GitHub Copilot CLI - CVE ids: CVE-2026-45033 - CVSS: 8.5 ## Summary A security vulnerability in GitHub Copilot CLI prior to version 1.0.43 allows a malicious bare git repository to achieve arbitrary code execution. The issue arises during automatic bare repository discovery when performing git operations. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-05-13: CVE-2026-45033: GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. (https://nvd.nist.gov/vuln/detail/CVE-2026-45033) ## Sources - 2026-05-13 NVD: CVE-2026-45033: GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. https://nvd.nist.gov/vuln/detail/CVE-2026-45033 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closed7.5GitHub Copilot GitHub Copilot CLI shell tool arbitrary code execution vulnerability
Patch now · Disclosed · since 6 Mar 2026 · CVE-2026-29783
AI - closed8.8GitHub Copilot CVE-2026-41109: Improper Neutralization in GitHub Copilot
Patch now · Disclosed · since 12 May 2026 · CVE-2026-41109
AI - closed5.7GitHub Copilot CVE-2026-23653: Command Injection Flaw in GitHub Copilot and VS Code
Patch now · Disclosed · since 14 Apr 2026 · CVE-2026-23653
AI - closed8.7Lokka CVE-2026-58201: Lokka Microsoft 365 MCP server bearer token leak
Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-58201
AI - closed6.5GitHub Copilot GitHub Copilot and Visual Studio Code vulnerable to credential disclosure
Patch now · Disclosed · since 8 Sep 2026 · CVE-2026-81381
AI - closed5.3GitHub Copilot CVE-2026-81380: GitHub Copilot and VS Code command injection vulnerability
Patch now · Disclosed · since 8 Sep 2026 · CVE-2026-81380
AI