Repomix is a tool that packages repositories into AI‑friendly files. In versions prior to 1.14.1 the code that performs a shallow clone passes the value supplied to the "--remote-branch" option directly to the underlying git fetch and git checkout commands without validation or the use of a "--end‑of‑options" marker. This allows an attacker to inject additional Git options, such as "--upload-pack", that bypass the validateGitUrl() checks and can execute arbitrary commands through local or SSH‑style transports. The flaw is a command‑injection vulnerability (CWE‑88) that can give an attacker remote code execution on any host running a vulnerable Repomix instance.

All releases of Repomix distributed by Yamadashy that are earlier than version 1.14.1 are affected. Users who have not upgraded to 1.14.1 or newer are exposed to the injection flaw.

The CVSS score of 7.5 indicates a high impact vulnerability, while the EPSS score of < 1 % suggests that exploitation has not been widely observed yet. The flaw is not listed in the CISA KEV catalog. The likely attack vector is inferred to be any entity that can invoke Repomix with a crafted "--remote-branch" argument; this could be a malicious repository maintainer or an automated service that processes untrusted input. Since the flaw can be triggered without additional privilege escalation, it poses a significant threat on systems where Repomix is used to fetch remote repositories.