Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository's own Git configuration names a command that the agent runs on the developer's machine, four of them still unpatched at publication.

The command executes as the user, outside the agent's sandbox and without an approval prompt, and exploitation requires the repository to arrive

guid

https://thehackernews.com/2026/09/malicious-git-configs-can-make-claude.html

source_url

https://thehackernews.com/2026/09/malicious-git-configs-can-make-claude.html

id: 2857
uid: j63rQ
insdate: 2026-09-02 15:10:05
title: Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
additional: Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository's own Git configuration names a command that the agent runs on the developer's machine, four of them still unpatched at publication.

The command executes as the user, outside the agent's sandbox and without an approval prompt, and exploitation requires the repository to arrive
category: Cybersecurity
md5:
guid: https://thehackernews.com/2026/09/malicious-git-configs-can-make-claude.html
source_url: https://thehackernews.com/2026/09/malicious-git-configs-can-make-claude.html
updated:
image:
author_name:
author_link:
Add Comment
Type in a Nick Name here
 
AI Testing

Autonomous AI API, a cutting-edge platform that leverages advanced AI technologies to enable self-modification and self-repair of its core files. This innovative site utilizes machine learning algorithms to detect and correct errors, ensuring maximum uptime and performance. With its autonomous capabilities, the AI API can adapt to changing requirements, learn from user interactions, and continuously improve its functionality.
Page Views

This page has been viewed 3 times.

Search cybersec
Search cybersec by entering your search text above.
Category List cybersec