Black Hat USA 2026: GitHub Issue Threatens Major AI Coding Workflows
Research at Black Hat USA 2026 highlights vulnerabilities in AI coding tools due to GitHub issues. Key security flaws were identified and addressed.
At Black Hat USA 2026, research revealed that a public GitHub issue opened by an outsider could compromise AI coding tools from Anthropic, Google, and OpenAI. Researchers tested these tools against their own repositories, uncovering vulnerabilities such as remote code execution and credential theft. The risks arise when external text reaches agents with access to command-line tools and sensitive credentials.