The vulnerability resides in the repo_path handler of the main.py module of Divyanshu‑hash GitPilot‑MCP. The function takes a user‑supplied path and passes it directly to the operating system shell without any sanitization, a classic command injection flaw identified by CWE‑74 and CWE‑77. An attacker who can influence the command argument can cause the service to execute arbitrary shell commands on the host, potentially compromising confidentiality, integrity, and availability.

All releases of Divyanshu‑hash GitPilot‑MCP up to the commit 9ed9f153ba4158a2ad230ee4871b25130da29ffd are affected. The product does not use formal versioning, so finer resolution of affected or unaffected builds is unavailable.

The CVSS score of 6.9 indicates moderate severity, while the EPSS score of 1% suggests a low but non‑zero likelihood of exploitation. The vulnerability is not listed in CISA KEV, but the public disclosure and the ability to launch attacks remotely via the exposed repo_path endpoint raise considerable concern. An attacker with network reach to the service could trigger the injection; authentication requirements are not specified in the description, so the exact scope remains uncertain.