importantSYS.SOURCE: The Hacker News• 2026-08-07T13:48:35+05:30

Vulnerabilities in Claude Code and Gemini CLI Allow Unauthorized Access to CI Secrets via GitHub Issues

#ai #vulnerability #ci-cd #security #command-injection

Two critical vulnerabilities in Claude Code and Gemini CLI allowed unauthorized access to CI workflow secrets through crafted GitHub issues, enabling command injection and data exfiltration. Patches were released, but one flaw in OpenAI's Codex remains unaddressed with no available fix.

A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic's and Google's own coding-agent repositories. On OpenAI's, it was enough to hijack the next agent run.

Novee Security ran the attack against each vendor's agent in the configuration that the vendor ships by default, and presented the work at Black Hat USA on August 5.

Read original article

*** END OF TRANSMISSION ***

> NEW MEXICO COURT ORDERS META TO PAY $567M IN CHILD SAFETY VIOLATION CASE > THE MISCONCEPTION OF TIME IN CLIMATE ACTION AND ITS IMPLICATIONS > MICROSOFT 365 AITM PHISHING CAMPAIGN TARGETS PAYROLL AND FINANCE EMAILS > US GOVERNMENT PAYS RWE $1.2B TO ABANDON OFFSHORE WIND PROJECTS UNDER TRUMP ADMINISTRATION > AI-ASSISTED HTTP TERMINATOR DISCOVERS NEW HTTP DESYNCHRONIZATION TECHNIQUES AND APACHE ZERO-DAY VULNERABILITY > NATJACK ATTACK EXPLOITS NAT TABLE MANIPULATION TO HIJACK TCP SESSIONS AND SPOOF DNS > MALWARE EXPLOITS WINDOWS HELLO FOR BUSINESS FOR PERSISTENT ENTRA ID ACCESS > VULNERABILITIES IN CLAUDE CODE AND GEMINI CLI ALLOW UNAUTHORIZED ACCESS TO CI SECRETS VIA GITHUB ISSUES > TEAMPCP'S LONG-TERM REDIS ATTACKS AND SUPPLY CHAIN CAMPAIGNS TRACED BACK TO 2020 > SUCCESSFUL COMPILATION OF NETSCAPE 3.0.2 ON 64-BIT DEBIAN SYSTEM> NEW MEXICO COURT ORDERS META TO PAY $567M IN CHILD SAFETY VIOLATION CASE > THE MISCONCEPTION OF TIME IN CLIMATE ACTION AND ITS IMPLICATIONS > MICROSOFT 365 AITM PHISHING CAMPAIGN TARGETS PAYROLL AND FINANCE EMAILS > US GOVERNMENT PAYS RWE $1.2B TO ABANDON OFFSHORE WIND PROJECTS UNDER TRUMP ADMINISTRATION > AI-ASSISTED HTTP TERMINATOR DISCOVERS NEW HTTP DESYNCHRONIZATION TECHNIQUES AND APACHE ZERO-DAY VULNERABILITY > NATJACK ATTACK EXPLOITS NAT TABLE MANIPULATION TO HIJACK TCP SESSIONS AND SPOOF DNS > MALWARE EXPLOITS WINDOWS HELLO FOR BUSINESS FOR PERSISTENT ENTRA ID ACCESS > VULNERABILITIES IN CLAUDE CODE AND GEMINI CLI ALLOW UNAUTHORIZED ACCESS TO CI SECRETS VIA GITHUB ISSUES > TEAMPCP'S LONG-TERM REDIS ATTACKS AND SUPPLY CHAIN CAMPAIGNS TRACED BACK TO 2020 > SUCCESSFUL COMPILATION OF NETSCAPE 3.0.2 ON 64-BIT DEBIAN SYSTEM