A fake bug report is all it takes to hijack a coding agent — 85% success rate across the major ones (Agentjacking, June 2026)

Researchers at Tenet Security and the Cloud Security Alliance's research labs found that AI coding agents will follow instructions hidden inside content they're supposed to be reviewing — a bug report, a README, a support ticket. No phishing link, no malware. The agent just trusts the input. They measured an 85% success rate across major coding agents when the payload was disguised as a routine bug report. The pattern that matters here: anywhere an agent automatically trusts external content it didn't generate, that content can carry instructions it'll follow without asking. Same blind spot shows up in a second case I covered — a "safety check" README that named real tools but launched a different payload when an agent ran it in auto-review mode. Curious how others here are handling this — do you sandbox agent input, or is it more about not giving agents write access to begin with?