# Git configuration flaws expose several AI coding agents to local command execution

_Published Wednesday, September 2, 2026 at 5:07 PM EDT · Security, AI · Latest · Tier 1 — Major_

Manifold Security disclosed eight flaws across seven command-line AI coding agents that can cause a repository's Git configuration to name a command executed on a developer's machine.

The article says exploitation requires a received repository with its .git directory intact, rather than an ordinary clone. It reports fixes for goose, Claude Code and Cursor; Hermes Agent, Qwen Code, Grok Build and a second Claude Code path remained unpatched at publication. OpenAI published three CVEs covering the class in Codex, according to the article.

## Sources

- [The Hacker News](https://thehackernews.com/2026/09/malicious-git-configs-can-make-claude.html)

---
Canonical: https://techandbusiness.org/newswire/X3FvZfdEIfP-t3PCb7OXCw
Published: 2026-09-02T21:07:35.079Z
Story chronology: 2026-09-02T14:06:59.000Z
Retrieved: 2026-10-19T07:36:33.635Z
Publisher: Tech & Business (techandbusiness.org)