Attack-Surface on iamelli0t's bloghttps://iamelli0t.github.io/tags/attack-surface/Recent content in Attack-Surface on iamelli0t's blogHugoenSat, 10 Oct 2026 00:00:00 +0000AI Agent Security Series: 1. Taking an AI Agent Aparthttps://iamelli0t.github.io/ai-agent-security/01/Sat, 10 Oct 2026 00:00:00 +0000https://iamelli0t.github.io/ai-agent-security/01/<p>Since 2025, mainstream coding agents have entered a period of frequent severe-vulnerability disclosures: Claude Code, Codex, Cursor, Gemini CLI, and GitHub Copilot have each produced vulnerabilities that a malicious repository can trigger remotely. In Claude Code&rsquo;s CVE-2025-59536, hooks configuration shipped by a malicious repository executed before the trust dialog appeared [1]; in Codex CLI&rsquo;s CVE-2025-61260, project-local MCP configuration was auto-loaded, so cloning a single repository handed over execution and the GitHub token [2]; in Cursor&rsquo;s DuneSlide (CVE-2026-50548/49), the sandbox write allowlist was built from model-supplied parameters, letting injected content point the allowlist at the sandbox executor itself [4].</p>