Gitahead Through 2.7.1 On Macos Command Injection Via Show In Finder Applescript

Back www.vulncheck.com

Gitahead Through 2.7.1 On Macos Command Injection Via Show In Finder Applescript

www.vulncheck.com • October 7, 2026

Share: View original

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Command Injection Vulnerability in GitAhead Affects macOS Users A command injection vulnerability has been identified in GitAhead versions up to 2.7.1 on macOS. The flaw allows attackers to execute arbitrary shell commands through AppleScript when users right-click a file and select 'Show in Finder'. This vulnerability has been present since at least version 2.5.0 and is triggered by filenames containing specific characters that are not properly escaped. No fixed version has been released as of the publication date. The vulnerability is categorized under CWE-78 for improper neutralization of special elements used in OS commands. Users of GitAhead on macOS are advised to be cautious until a patch is available. 52

Extracted Entities

Attack Types (1)

Command Injection

CWE Weaknesses (1)

CWE-78 - OS Command Injection

MITRE ATT&CK (1)

T1059 - Command and Scripting Interpreter

Platforms (1)

Vulnerabilities (1)

OS Command Injection