It can be used to break out from restricted environments by running non-interactive system commands.
This vector requires an additional positional argument.
git ls-remote '--upload-pack=id>/tmp/foo;' foo
Agent 008: Chaining Vulnerabilities to Compromise GoCD