Claude Code and Gemini CLI flaws let GitHub issue reach CI secrets
Novee Security exploited flaws in Anthropic's and Google's coding agents to execute code on CI runners via a GitHub issue, presented at Black Hat USA on August 5. Gemini CLI's CVE-2026-12537 (CVSS 10.0) is fixed in 0.39.1; Claude Code's CVE-2026-54316 is fixed in 2.1.163.
Featured · Elad Meged
1 source
Daily brief
Get tomorrow's AI brief in your inbox
More stories today
- Z.ai CEO Jie Tang: GLM 5.3 gains come from RL, not parameter count
- New tool adds 14 skills to Claude Code and Cursor for Markdown diagrams
- Tool turns Claude into a team of AI employees on your Mac
- GOP panics over Big Tech ties as Trump shifts on AI regulation
- Ethan Mollick: Claude's skill creator beats ChatGPT for reusable skills