CVE-2026-19592

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 2, 2026

Last Seen

September 2, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

GitSpawn Vulnerabilities Allow Code Execution in AI Coding Agents69.8

A series of vulnerabilities, termed GitSpawn, have been disclosed affecting multiple AI coding agents, including Claude Code, Codex, and Cursor. These flaws allow malicious Git configurations to execute arbitrary code on a developer's machine without user interaction or approval. The vulnerabilities...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

GitSpawn Vulnerabilities Allow Code Execution in AI Coding Agents

Sep 2·6 sources

Related Entities

Malware GitSpawn Anthropic OpenAI CVE-2026-55607 CVE-2026-71963 CVE-2026-72718 CWE-78 - OS Command Injection Government T1059 - Command and Scripting Interpreter GitHub JetBrains IDEs

CVE-2026-19592

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

GitSpawn Vulnerabilities Allow Code Execution in AI Coding Agents

Related Articles (1)

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Related Entities