← Back to feed

GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code and Others

AI · Security · 2026-09-01 10:06:00

Research finds that AI coding agents like Claude Code, Codex, and Cursor auto-execute git commands during initialization, allowing attackers to inject malicious code via untrusted workspaces.

Source: www.manifold.security


Auto-generated summary for reference only. RSS