AI Security

← Security overview

1. Nov 112026

   URGENT: OpenAI Patches Code Execution Flaw in Codex Desktop

   CVE-2026-110930: OpenAI Codex Desktop for Windows Vulnerable to Code Execution via Malicious Library Paths

   HighPatch availableOpenAI Codex Desktop for WindowsCoding agents & IDEs

2. Nov 102026

   ALERT: Copilot for JetBrains had a local command-injection leak

   GitHub Copilot for JetBrains: CVE-2026-83953 Command Injection Leaks Local Data

   MediumPatch availableGitHub Copilot for JetBrainsCoding agents & IDEs

3. Nov 92026

   ALERT: Claude Code Feature Leaks Developer Secrets to GitHub

   MediumReportedClaudeCoding agents & IDEs

4. Nov 82026

   ALERT: Claude Code Settings File Leaked Secrets to 1,122 Public GitHub Repos, Apiiro Says

   MediumReportedClaudeCoding agents & IDEs

5. Nov 42026

   URGENT: Mistral Vibe ran repo commands before you could say no

   Mistral Vibe CVE-2026-122135: A Crafted Repo Ran Code Before the Trust Prompt

   HighPatch availableMistral VibeCoding agents & IDEs

6. Oct 292026

   URGENT: Embedded browsers in five AI apps could read your disk

   EMBRACE: Embedded Browsers in Five AI Assistants Could Leak Files or Run Code

   HighNo fix yetCursor, Copilot, Codex, VS Code, Claude DesktopCoding agents & IDEs

7. Oct 232026

   ALERT: Shadow AI Risks: Securing Developer Endpoints in LLM Workflows

   MediumReportedCoding agents & IDEs

8. Oct 222026

   ALERT: Coding Agents Can Be Tricked Into Running Attacker Commands After Compacting Context

   MediumReportedGoogleCoding agents & IDEs

9. Sep 22026

   ALERT: AI Agents Run Malicious Code from Poisoned Git Repositories

   MediumReportedAnthropicCoding agents & IDEs

10. May 82026

    ALERT: Vibe-Coding and Shadow AI Security Crisis Explained

    MediumReportedCoding agents & IDEs

11. Mar 162026

    ALERT: Betterleaks: Faster AI-Ready Secret Scanner vs Gitleaks

    MediumReportedCoding agents & IDEs