A vulnerability in the execGitCommand function of Kirachon context‑engine version 1.9.0 and earlier allows malicious manipulation of the args parameter to perform arbitrary command injection. This flaw affects the review‑git‑diff endpoint, potentially enabling an attacker to execute arbitrary shell commands on the server. The weakness is a classic command injection (CWE‑74) with improper handling of user‑supplied arguments (CWE‑77).

The affected product is Kirachon context‑engine, version 1.9.0 and all earlier releases. The vulnerability exists in the review‑git‑diff endpoint within src/mcp/utils/gitUtils.ts and is mitigated by upgrading to version 1.9.1, which contains the patched execGitCommand implementation.

With a CVSS score of 5.1 the vulnerability is considered medium severity. The EPSS score is unavailable, and the issue is not listed in the CISA KEV catalog. The likely attack vector is via the HTTP review‑git‑diff endpoint, inferred from the description that the flaw resides in that endpoint and requires manipulation of the args parameter. Because the flaw requires the endpoint to be reachable and the attacker to control the input, the exploitability depends on network exposure and lack of input validation. Until a patch is applied, systems that expose this endpoint without strict access controls remain at risk of remote command execution.