Threats tagged 'brew-tach-cve-2026-67323'

Multiple command injection and arbitrary file overwrite vulnerabilities exist in Kimi CLI's GitPython integration due to insufficient validation of user-supplied Git command options in functions like Repo.archive() and git.ls_remote(). These vulnerabilities affect various versions of python-git and can lead to high impact including confidentiality, integrity, and availability loss. A patch is available to address these issues.