{"data":{"id":"c41d5118-9c3e-415e-b7bf-5b02ba0c9162","title":"Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code","summary":"AI coding agents like Claude, Codex, and Cursor can be tricked into running malicious code when a developer clones a repository that contains a crafted Git configuration file (.git/config). The vulnerability works because these agents automatically run Git commands in the background to check file status, and the malicious configuration specifies a command (using a Git setting called core.fsmonitor) that executes with the developer's full permissions, bypassing any safety checks or approval prompts.","solution":"Updates have been released for some affected tools: goose (update to version 1.44.0 or later), Codex CLI (update to 0.131.0 or later), Codex Desktop for macOS (update to 26.519.22136 or later), Codex Desktop for Windows (update to 26.519.21041 or later), and Claude Code (update to 2.1.196 or later for the core.fsmonitor vulnerability). For Hermes Agent, Qwen Code, and Grok Build, fixes are pending.","labels":["security"],"sourceUrl":"https://thehackernews.com/2026/09/malicious-git-configs-can-make-claude.html","publishedAt":"2026-09-02T14:06:59.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedVendors":["OpenAI","Anthropic"],"affectedVendorsRaw":["Claude","Codex","Cursor","Hermes Agent","Qwen Code","Grok Build","goose"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-02T14:06:59.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}