THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-19266 (MEDIUM 5.5) — A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git-diff Endpoint. Executing a manipulation of the argument args can lead to command injection. Upgrading

[NVD] CVE-2026-19266 (MEDIUM 5.5) — A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git-diff Endpoint. Executing a manipulation of the argument args can lead to command injection. Upgrading

highnvdPublished 2026-08-08

CVE-2026-19266 CVSS: 5.5 MEDIUM Published: 2026-08-08T08:16:51.390

A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git-diff Endpoint. Executing a manipulation of the argument args can lead to command injection. Upgrading to version 1.9.1 mitigates this issue. This patch is

Indicators of compromise

e0729dcfd3a2b1682a7bff86e7174852c03419basha1
CVE-2026-19266cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19266