GitSpawn

GitSpawn flaws in AI coding agents execute arbitrary code from malicious repository configurations

Manifold Security discovers GitSpawn: eight vulnerabilities across seven AI coding tools (Claude Code, Cursor, Codex) that execute attacker code from repository .git/config.