> TritonInfoSec News
Home / Sep 03, 2026 / Story
0
#10 The Hacker News general September 02, 2026 at 14:06 UTC

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

By [email protected] (The Hacker News)

AI Summary

Manifold Security disclosed eight security flaws across seven command-line AI coding agents — including Claude, OpenAI Codex, and Cursor — where malicious .git configuration files can execute attacker-supplied commands on a developer's machine at the user's privilege level, outside any sandbox and without an approval prompt. Four of the eight vulnerabilities remained unpatched at time of publication. The attack vector requires only that a developer clone or interact with a malicious repository, making this a realistic supply chain risk for development teams adopting AI coding assistants.

Read full article → https://thehackernews.com/2026/09/malicious-git-co…

Relevance score: 78.0/100

# More from September 03

  1. 1
    FBI Probes Service Selling 153M+ Drivers Licenses Krebs on Security
  2. 2
    Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain The Hacker News
  3. 3
    Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads The Hacker News
  4. 4
    Health data of more than 9.5 million people leaked from Aesto record system The Record
  5. 5
    Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure The Hacker News
  6. 6
    BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access The Hacker News
  7. 7
    Pegasus, NoviSpy variant spyware found on devices of Serbian activists CyberScoop
  8. 8
    Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials The Hacker News
  9. 9
    Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks BleepingComputer