Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
Manifold Security disclosed eight flaws across seven command-line AI coding agents in which a repository's own Git configuration names a command the agent runs on the developer's machine, with four still unpatched when retested on September 1. The...