
GitHub Copilot CLI fixes shell parameter-expansion bypass that can lead to arbitrary code execution (CVE-2026-29783)
GitHub disclosed a High-severity issue in Copilot CLI (<=0.0.422) where crafted bash parameter expansion can bypass shell safety checks and execute arbitrary commands; fixed in 0.0.423.
NewsDeveloper ToolingAI Security
Yesterday