CVE-2026-49987 Yamadashy CVE debrief

Who should care

Users of Repomix, especially those using versions prior to 1.14.1, should be aware of this vulnerability and take steps to mitigate it. Additionally, security teams and administrators responsible for managing Repomix instances should prioritize patching and monitoring for potential exploitation attempts. Affected operator, platform, vulnerability-management, and security-team impact should be reviewed and verified.

Technical summary

CVE-2026-49987 is a vulnerability in Repomix, a tool for packing repositories into AI-friendly files. The issue exists in versions prior to 1.14.1 and allows for Git option injection, potentially leading to command execution via local or SSH-style transports. The vulnerability is caused by the lack of validation or --end-of-options in the execGitShallowClone function in src/core/git/gitCommand.ts. Users of Repomix should prioritize patching to prevent potential command injection attacks.

Defensive priority

Repomix users should prioritize patching to prevent potential command injection attacks.

Recommended defensive actions

• Update Repomix to version 1.14.1 or later
• Review and validate Git URLs and repository configurations
• Implement compensating controls, such as restricting access to Repomix instances
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE-2026-49987 issue exists in Repomix versions prior to 1.14.1. An attacker could inject Git options, potentially leading to command execution via local or SSH-style transports. Evidence is based on official CVE and NVD records, as well as vendor advisories. The vulnerability is caused by the lack of validation or --end-of-options in the execGitShallowClone function in src/core/git/gitCommand.ts. Affected users should verify their deployments and review compensating controls.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.