An OS command injection flaw exists in the `internal/gitcmd` component of DeepSeek-Reasonix (Reasonix Studio). A local attacker who controls repository content, specifically the `.gitattributes` and `.git/config` files, can execute arbitrary commands through the desktop application's workspace-changes diff viewer. The issue occurs because the tool fails to restrict the Git clean filter, allowing a malicious repository configuration to define a filter containing attacker-controlled commands that are executed when a developer opens a file diff.
Delivery of the malicious configuration typically requires mechanisms such as repository archives, synced folders, CI caches, or devcontainer builds, as standard HTTPS or SSH clones do not transfer the `.git/config` file. Additionally, a compromised or prompt-injected AI agent already running on a workstation could potentially write the poisoned configuration directly.