Claude threat report

Security researchers at Nobi Security disclosed a shared trust vulnerability in Claude Code, Gemini CLI, and Codex that enables attackers to exploit broken trust boundaries across tool permissions and sandbox isolation. By crafting malicious GitHub issues, attackers can influence subsequent agent runs to execute arbitrary code, exfiltrate API keys and confidential data, and maintain persistent control. Anthropic addressed initial Git-based bypasses but researchers identified additional paths to read environment variables and exfiltrate API keys through public services.

• Three trust vulnerabilities found in Claude Code, Gemini CLI and(opens in a new tab)