{"id":"CVE-2026-106059","published":"2026-10-07T12:17:09.100","lastModified":"2026-10-10T03:17:04.260","description":"GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do shell script payload, which runs as the victim user when Show in Finder is chosen.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://github.com/gitahead/gitahead","tags":[]},{"url":"https://github.com/gitahead/gitahead/blob/v2.7.1/src/tools/ShowTool.cpp#L40-L48","tags":[]},{"url":"https://github.com/gitahead/gitahead/issues/663","tags":[]},{"url":"https://www.vulncheck.com/advisories/gitahead-through-2.7.1-on-macos-command-injection-via-show-in-finder-applescript","tags":[]}],"exploitRefs":[{"url":"https://github.com/gitahead/gitahead","tags":[]},{"url":"https://github.com/gitahead/gitahead/blob/v2.7.1/src/tools/ShowTool.cpp#L40-L48","tags":[]},{"url":"https://github.com/gitahead/gitahead/issues/663","tags":[]}],"hasPoc":true,"ai":{"summary":"GitAhead through 2.7.1 on macOS allows attackers to execute shell commands by crafting repository filenames, posing a significant risk due to the high privilege level of the victim user.","exploitability":"Exploitation is relatively straightforward as attackers can commit a file with a payload that runs when the Show in Finder feature is used, requiring only basic knowledge of crafting filenames and shell scripts.","blast_radius":"If exploited, this vulnerability could lead to full system compromise, as the commands run with the victim user's privileges, potentially allowing attackers to gain control over the affected macOS system.","remediation":"Upgrade to GitAhead 2.7.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","macos","shell-injection"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:43:42.140Z"}}