Dashboard / CVE-2026-19266

CVE-2026-19266

MEDIUM
MEDIUM Priority: 0.20 BB Relevance: 46/100
Published: 2026-08-08 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Interaction

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git-diff Endpoint. Executing a manipulation of the argument args can lead to command injection. Upgrading to version 1.9.1 mitigates this issue. This patch is called e0729dcfd3a2b1682a7bff86e7174852c03419ba. It is advisable to upgrade the affected component.

Weakness Classification (2)

References & Advisories (9)

Bug Bounty Relevance

46 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.1 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

3.91%
Raw Score 0.039120
Percentile 90.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.03912
2026-10-28
0.03912

Intelligence Sources

nvd ref →

External Links