GitSpawn Vulnerability Enables Code Execution in AI Coding Agents
September 4, 2026
GitSpawn identifies a flaw allowing untrusted repositories to execute arbitrary code through agents like Claude Code, Cursor, and Grok. The vulnerability exploits how agents process git calls within an opened workspace.
HOW THIS AFFECTS YOU
●
builderYou must implement strict sandboxing for any agent that has permission to execute shell or git commands.
●
policyThis underscores the critical need for safety guardrails in autonomous coding environments.