A Git Config File Can Hijack Your Coding Agent. Here's the Fix List.
This story is from 2026-10-14. It is preserved in the archive; the latest stories are on the live feed.
A malicious git config can run code inside seven coding agents before any approval prompt. Three recent disclosures (GitSpawn, BragJack and Salesbleed) show agent attacks that never needed to beat the model. They went around the approval prompt, the browser boundary or the URL filter instead. If yo…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-14 07:03 · DEV Community — AI
A Git Config File Can Hijack Your Coding Agent. Here's the Fix List.