CVE Intelligence

Kirachon Context-engine vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Kirachon Context-engine: 1 record(s), with affected versions and fixes.

CVE-2026-19266 Medium · 5.5 CWE-74 Aug 8, 2026
Kirachon context-engine review-git-diff Endpoint gitUtils.ts execGitCommand command injection
A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git-diff Endpoint. Executing a manipulation of the argument args can lead to command injection. Upgrading to version 1.9.1 mitigates this issue. This patch is called e0729dcfd3a2b1682a7bff86e7174852c03419ba. It is advisable to upgrade the affected component.