Vulnerabilities in AI Coding Tools Expose GitHub Secrets to Attackers

Vulnerabilities in AI Coding Tools Expose GitHub Secrets to Attackers

First seen 8 Aug 2026, 01:37 UTC •Feeds.4SysopsScworldhackread.com •79% similarity •69.0

Article Content

Browse articles
ThreatCluster

AI coding tools from Anthropic, Google, and OpenAI were found vulnerable to malicious GitHub issues. Researchers at Novee Security identified flaws in Claude Code, Gemini CLI, and Codex that could allow remote code execution, credential theft, and repository modifications. The vulnerabilities stem from hidden instructions in GitHub issues, with Gemini CLI receiving a critical CVSS score of 10.0. While patches have been issued for Claude Code and Gemini CLI, OpenAI's Codex requires workflow changes without a product update. Novee Security urged companies to review their workflows and limit token permissions due to similar configurations in over 100 public repositories. The vulnerabilities pose significant risks to developers and organizations using these tools.

Key Points: • AI coding tools from Anthropic, Google, and OpenAI are vulnerable to GitHub issues. • A critical CVSS score of 10.0 was assigned to Google's Gemini CLI vulnerability. • Patches are available for Claude Code and Gemini CLI, but Codex requires workflow changes.

ThreatCluster AI How this analysis works

Timeline

2026-08-07
Vulnerabilities disclosed by Novee Security
Novee Security revealed flaws in Claude Code, Gemini CLI, and Codex that could lead to credential theft and code execution.
Scworld
2026-08-07
Patches released for Claude Code and Gemini CLI
Both Anthropic and Google issued patches for their respective tools, addressing the identified vulnerabilities.
Feeds.4Sysops
2026-08-07
OpenAI Codex vulnerability requires workflow changes
Unlike the other tools, Codex does not have a patch and requires users to modify their workflows to mitigate risks.
Feeds.4Sysops

Extracted Entities

1 / 2

Community

Browse all →