2026-04-26 · 2 min · BitNinja Team

CVE-2026-6980: GitPilot-MCP Command Injection Risk

The recent discovery of a critical vulnerability, CVE-2026-6980, in the Divyanshu-hash GitPilot-MCP has raised significant concerns for system administrators and hosting providers. This vulnerability allows attackers to exploit command injections via the repopath function foun...