{"data":{"id":"e0351eaa-89cc-4f77-9d6e-744f42bfdbed","title":"CVE-2026-30304: In its design for automatic terminal command execution, AI Code offers two options: Execute safe commands and execute…","summary":"CVE-2026-30304 affects AI Code's automatic terminal command execution. Its \"Execute safe commands\" option runs commands the model classifies as safe without user approval, but the design is highly susceptible to prompt injection. An attacker can wrap any malicious command in a generic template to make the model misclassify it as safe, bypassing approval and enabling arbitrary command execution.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-30304","publishedAt":"2026-03-27T15:16:53.263Z","cveId":"CVE-2026-30304","cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["AI Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"AI Code terminal command execution bypassed via prompt injection","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00452,"epssCheckedAt":"2026-11-10T06:09:40.724Z","kevDateAdded":null,"advisoryAliases":["GHSA-3vj9-9x9c-pmm5"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T18:10:50.579Z","patchAvailable":null,"disclosureDate":"2026-03-27T15:16:53.263Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}