Skip to content

CVE-2026-71963

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
September 2, 2026
Last Seen
September 4, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A series of vulnerabilities, termed GitSpawn, have been disclosed affecting multiple AI coding agents, including Claude Code, Codex, and Cursor. These flaws allow malicious Git configurations to execute arbitrary code on a developer's machine without user interaction or approval. The vulnerabilities...

Public Exploits

Checking GitHub for proof-of-concept code…