AIKIDO-2026-599402

TL;DR

GitClient passes caller-provided values such as branch names, revisions, and commit or tag ranges to git as bare positional arguments. A value that begins with a dash is parsed by git as an option instead of data, so externally influenced input can inject git flags with no shell involved. Through checkout the --pathspec-from-file= option makes git read a file and surface its lines in the thrown error message, and through getRawCommits and getTags the --output= option writes the git log to an arbitrary path, enabling sensitive-file disclosure and arbitrary file overwrite. The fix inserts --end-of-options before every caller-provided value so such input is always treated as data rather than options.