Description
OS Command Injection in internal/gitcmd (git diff filter.clean/smudge invocation) in esengine DeepSeek-Reasonix (Reasonix Studio) allows a local attacker who controls repository content (.gitattributes + .git/config) to execute arbitrary commands via the desktop app's workspace-changes diff viewer.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
esengine DeepSeek-Reasonix
Default version status: unaffected
0 to < 2.21.0affected
esengine DeepSeek-Reasonix
Default version status: unaffected
0 to < 1.39.3affected