Stats Wire(@StatsWire):Security researchers just showed that Gemini CLI, Claude Code, and Codex can all leak CI secrets from a single poisoned GitHub issue. API keys. Tokens. Credentials. Anyone who can open an issue on your public repo can potentially turn the agent against you. Same prompt injection problem researchers warned about months ago. Still not fixed.

Stats Wire

@StatsWire

AI Engineer | Working with Agents I build AI explainers with code deep dives on YouTube

加入 November 2020

594 正在關注 2.3K 粉絲

Stats Wire@StatsWire

2026.09.06 12:19

Security researchers just showed that Gemini CLI, Claude Code, and Codex can all leak CI secrets from a single poisoned GitHub issue. API keys. Tokens. Credentials. Anyone who can open an issue on your public repo can potentially turn the agent against you. Same prompt injection problem researchers warned about months ago. Still not fixed.