// OpenaiHIGH
Researchers at Manifold Security disclosed the GitSpawn vulnerability class affecting AI coding agents including OpenAI Codex. The flaw exploits Git configuration hijacking to execute attacker-controlled commands when agents process malicious repositories, potentially granting access to SSH keys, API tokens, and credentials. OpenAI Codex and Cursor have been patched following reports from other researchers; other tools remain affected.
// Get alerts for Openai