AIKIDO-2026-666371

TL;DR

@argos-ci/core passes attacker-controlled CI branch and ref names directly into execSync template literals in its git helper functions. Because execSync runs the command string through a shell, metacharacters such as $() command substitution in a branch name are evaluated before git executes. When a project has remote content access disabled, the upload flow resolves a merge base using the unsanitized branch, letting an attacker who controls the branch name run arbitrary OS commands on the CI runner. The fix invokes git via execFileSync with an argument array so the values are passed literally and never reach a shell.