Jump to content
  • Sign Up
×
×
  • Create New...

[H4ckN3ws]Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets


Recommended Posts

  • Diamond Member

This is the hidden content, please

A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic's and
This is the hidden content, please
's own coding-agent repositories. On OpenAI's, it was enough to ******* the next agent run. Novee Security ran the attack against each vendor's agent in the configuration that the vendor ships by default, and presented the work at ****** Hat USA on August 5.

This is the hidden content, please

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below.
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Vote for the server

    To vote for this server you must login.

    Jim Carrey Flirting GIF

  • Recently Browsing   0 members

    • No registered users viewing this page.

Important Information

Privacy Notice: We utilize cookies to optimize your browsing experience and analyze website traffic. By consenting, you acknowledge and agree to our Cookie Policy, ensuring your privacy preferences are respected.