AINewsnow

Approval is theater if code runs before the gate

This story is from 2026-10-25. It is preserved in the archive; the latest stories are on the live feed.

Here is a nasty one. A malicious .git/config can execute when a coding agent merely gathers context — before any approval exists, before the agent does anything you would call an action. Seven agents were hit, including Claude Code, Cursor, and Codex. Eight findings. Four were still unpatched as of…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-25 00:11 · DEV Community — AI
    Approval is theater if code runs before the gate

More stories

  1. Do you track how much your Codex CLI / Claude Code sessions would cost? — r/ChatGPTPro
  2. Kimi K3.1 Pro and Kimi K3.1 Pro Highspeed are available now in AI Gateway — Vercel Blog
  3. Qwen 3.8 Flash Next GSQ-RCO IQ_3S at 70tok/s decode/1900tok/s prefill on 2013 Xeon E5-1680v2, 128GB quad channel DDR3-1866 ECC, and an EVGA 3090 FTW3 — r/LocalLLM
  4. Meet Claude Duet: Anthropic's new AI agent is ready to take over your Gmail, Slack and business tasks — Mint AI
  5. Kimi K3: A Claude clone or something else? — CoreWeave Blog
  6. Claude Code Subagents Token Usage: What They Really Cost — DEV Community — AI
  7. Q2 2026 Agent Framework Landscape — DEV Community — AI
  8. How to connect Claude to your CRM (web, desktop, Claude Code) — DEV Community — AI

Get the daily brief of stories like this at 6:30 every morning →