AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

highnewsLLM-Specific

security

Source: The Hacker NewsAugust 7, 2026

Summary

Security researchers found critical flaws in Claude Code and Gemini CLI that allowed attackers with no special access to execute code on CI systems (continuous integration, the automated servers that test and deploy code) by exploiting how these AI coding agents validate and run commands. Both vulnerabilities stem from a shared problem: the "harness" (the code that sits between the AI model and actual system execution) marked certain values as safe but then used them with higher privileges, letting attackers bypass security checks.

Solution / Mitigation

Update Gemini CLI to 0.39.1, run-gemini-cli to 0.1.22, and Claude Code to 2.1.163, then audit any workflow that outside users can trigger. For OpenAI's Codex, separate the two Codex passes into different jobs, run Codex with drop-sudo (restricted privileges) and a read-only sandbox, and run Codex as the last step in a job rather than before privileged steps that could use files it leaves behind.