PT-2026-35269

CVE-2026-7062

Published

2026-04-26

Updated

2026-05-23

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Intina47 context-sync versions prior to 2.0.0

Description A flaw in the Git Integration component, specifically within the src/git-integration.ts file, allows for remote OS command injection. This occurs when an attacker sends specially crafted data that the system executes as a system-level command.

Recommendations Update to a version later than 2.0.0. As a temporary workaround, restrict access to the Git Integration component to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Mida

Vendors

Affected products

Weakness enumeration

CWE-77: Improper Neutralization of Special Elements used in a Command (\'Command Injection\')

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

Related identifiers