Last week I scanned serena — a popular AI coding assistant with 25k ⭐. [BLOCK] COMMAND_INJECTION ...
Last week I scanned serena — a popular AI coding assistant with 25k ⭐.
[BLOCK] COMMAND_INJECTION agent.py:1222
subprocess.Popen(cmd, shell=True)
→ config value → arbitrary shell execution
Enter fullscreen mode
When Your AI Assistant Gets Hijacked Mid-Flight If you've handed your coding agent an...
“Context bombing” tricks malicious AI agents into shutting down before they can do harm.
By Aahana Mallela Introduction If you've spent any time in AI or security circles in the...
Your AI coding agent can read files, run shell commands, and call external APIs. That's also the...
AI coding agents — Lovable, bolt.new, Cursor, Replit — have made it possible for anyone to ship a...
Agent data injection forges trusted fields across six AI models, redirecting web and coding agents while bypassing prompt…
