Your coding agent can read your .env. Here's what we did about it.
This story is from 2026-09-10. It is preserved in the archive; the latest stories are on the live feed.
Run claude , codex , cursor , amp , whatever. It starts a shell as your user. Your user can read .env . So the agent can read .env . That is the whole problem. Not a bug in any harness, not a jailbreak, just the permission model working as designed. And it means that whenever an agent greps around…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-09-10 15:41 · DEV Community — AI
Your coding agent can read your .env. Here's what we did about it.