High severity7.8NVD Advisory· Published Sep 29, 2026· Updated Sep 29, 2026

CVE-2026-102437

Description

OS Command Injection in internal/gitcmd (git diff filter.clean/smudge invocation) in esengine DeepSeek-Reasonix (Reasonix Studio) allows a local attacker who controls repository content (.gitattributes + .git/config) to execute arbitrary commands via the desktop app's workspace-changes diff viewer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Esengine/DeepSeek-Reasonixllm-create

Patches

Vulnerability mechanics

References

github.com/esengine/DeepSeek-Reasonix/security/advisories/GHSA-grg2-7gc6-36m6nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000