Tag
Security researchers discovered critical vulnerabilities in the default GitHub Actions configurations for Anthropic's Claude Code, Google's Gemini CLI, and OpenAI's Codex, allowing remote code execution through unauthenticated issues. A related privilege escalation flaw in Google's ADK repo highlights systemic weaknesses in the CI/CD scaffolding for these AI agents.