Detections
Analytics

SCA: security update for @github/copilot (GHSA-g8r9-g2v8-jv6f)

high Tenable Self-Hosted Container Security Plugin ID 438448

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code
 execution through crafted bash parameter expansion patterns. An attacker who can influence the commands
 executed by the agent (e.g., via prompt injection through repository files, MCP server responses, or user
 instructions) can exploit bash parameter transformation operators to execute hidden commands, bypassing
 the safety assessment that classifies commands as "read-only." This has been patched in version 0.0.423.
 The vulnerability stems from how the CLI's shell safety assessment evaluates commands before execution.
 The safety layer parses and classifies shell commands as either read-only (safe) or write-capable
 (requires user approval). However, several bash parameter expansion features can embed executable code
 within arguments to otherwise read-only commands, causing them to appear safe while actually performing
 arbitrary operations. The specific dangerous patterns are ${var@P}, ${var=value} / ${var:=value}, ${!var},
 and nested $(cmd) or <(cmd) inside ${...} expansions. An attacker who can influence command text sent to
 the shell tool - for example, through prompt injection via malicious repository content (README files,
 code comments, issue bodies), compromised or malicious MCP server responses, or crafted user instructions
 containing obfuscated commands - could achieve arbitrary code execution on the user's workstation. This is
 possible even in permission modes that require user approval for write operations, since the commands can
 appear to use only read-only utilities to ultimately trigger write operations. Successful exploitation
 could lead to data exfiltration, file modification, or further system compromise. (CVE-2026-29783)

Solution

Update the @github/copilot library and its related packages to version 0.0.423 or later.

See Also

https://github.com/advisories/GHSA-g8r9-g2v8-jv6f

Plugin Details

Severity: High

ID: 438448

Version: Revision 1.8

Type: Local

Family: SCA Checks

Published: 3/6/2026

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.88

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-29783

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 7

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS v4

Risk Factor: High

Base Score: 7.5

Threat Score: 6.6

Threat Vector: CVSS:4.0/E:P

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/6/2026

Vulnerability Publication Date: 3/6/2026

Reference Information

CVE: CVE-2026-29783

cwe: CWE-78