Is CVE-2026-19266 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-19266?

CVE-2026-19266 has a CVSS v3 severity of MEDIUM (5.5).

Back

CVE-2026-19266

Description

A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git-diff Endpoint. Executing a manipulation of the argument args can lead to command injection. Upgrading to version 1.9.1 mitigates this issue. This patch is called e0729dcfd3a2b1682a7bff86e7174852c03419ba. It is advisable to upgrade the affected component.