OS Command Injection in internal/gitcmd (git diff filter.clean/smudge invocation) in esengine DeepSeek-Reasonix (Reasonix Studio) allows a local attacker who controls repository content (.gitattributes + .git/config) to…
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.01013·Published 2026-09-29·Fixed in 2.21.0, 1.39.3CWE-78