{
  "id": 3427541,
  "title": "Three AI Coding Agents, Three Ways to Break Them, and One Thing Detection Will Never Give You",
  "url": "https://urgent.news/2026/08/26/three-ai-coding-agents-three-ways-to-break-them-and-one-thing",
  "topic": "ai",
  "section": "AI",
  "published": "2026-08-26T04:39:09.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/correctover/three-ai-coding-agents-three-ways-to-break-them-and-one-thing-detection-will-never-give-you-5b5j"
  },
  "original_language": "en",
  "account": "Three AI coding agents have distinct vulnerabilities that highlight a critical issue in their design. The vulnerabilities exist within Claude Code, Gemini CLI, and OpenAI Codex, all of which are widely used tools. These flaws demonstrate that detection alone is insufficient to safeguard against AI agent exploitation. Each vulnerability stems from a trust handoff failure, where the agent's validator trusts that the input it receives is exactly what will execute. This trust failure enables attackers to manipulate the agents by injecting malicious commands or environment variables, leading to potential supply chain compromises. The root cause lies in the architecture of these agents: they trust the sanitized representation of input, unaware that attackers can bypass this validation. The vulnerabilities expose the need for cryptographic evidence to prove what actually occurred after trust boundaries are crossed, as detection cannot ensure the integrity of the trust handoff.",
  "summary": "Three AI Coding Agents, Three Ways to Break Them, and One Thing Detection Will Never Give You I've spent the last week reading through the technical writeups from Novee Security's Black Hat USA 2026 briefing, \"Trusted Enough to Run: Breaking AI Agents in Official Workflows.\" The title sounds broad. The content is not. They found three distinct, exploitable vulnerabilities in three of the most…",
  "key_points": [
    "Claude Code, Gemini CLI, and OpenAI Codex each have distinct vulnerabilities",
    "Vulnerabilities stem from trust handoff failure in agent validation",
    "Cryptographic evidence needed to prove trust handoff integrity"
  ],
  "editors_take": "The vulnerabilities in widely used AI coding agents highlight that detection alone cannot safeguard against exploitation, underscoring a need for a new approach that incorporates cryptographic evidence to ensure integrity.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}