The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This vulnerability allows an authenticated attacker, who can register for free, to execute arbitrary commands on the server with www-data privileges. The issue has been fixed in version 2026061802.