GitSpawn Flaw Let Untrusted Repositories Execute Code Through AI Coding Agents

A security investigation has identified eight findings across seven AI coding agents that could let repository-controlled Git settings execute attacker code before users approve a workspace or send their first prompt. OpenAI Codex and Cursor were among the affected products, and both had patched their reported issues by publication.