Storia in 4 fonti

Comment and Control: a GitHub comment hijacks Claude Code in CI

A security researcher showed that a GitHub PR title, issue body, or comment could become a prompt...

Raccontata da

Confronto fonti

4 prospettive sulla stessa storia

AI · summaries

dev.toStai leggendo3 mesi fa

Comment and Control: a GitHub comment hijacks Claude Code in CI

GitHub comments could hijack Claude Code in CI and exfiltrate secrets via prompt injection; Anthropic rated it CVSS 9.4 Critical. The flaw is structural: agents read untrusted input. The fix is firewall tool calls with Clampd to block recon and exfiltration.

originale

thehackernews.com3 mesi fa

Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories

A flaw in Anthropic’s Claude Code GitHub Action allowed a malicious GitHub issue from a bot actor to trigger workflows and gain write access to repos.

Leggi questa versione → originale

Timeline cronologica

martedì 2 giugno 2026·dev.to
Comment and Control: a GitHub comment hijacks Claude Code in CI
A security researcher showed that a GitHub PR title, issue body, or comment could become a prompt...
giovedì 4 giugno 2026·thenextweb.com
Claude Code GitHub Action flaw enabled repository hijacking
A flaw in Claude Code's GitHub Action let attackers bypass permission checks via fake bots and steal OIDC tokens through prompt injection.

Comment and Control: a GitHub comment hijacks Claude Code in CI

Confronto fonti

Comment and Control: a GitHub comment hijacks Claude Code in CI

Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories

Timeline cronologica

Comment and Control: a GitHub comment hijacks Claude Code in CI

Claude Code GitHub Action flaw enabled repository hijacking

Claude Code GitHub Action flaw enabled repository hijacking

Claude Code, una sola issue su GitHub poteva dirottare qualunque repository

Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories

One Malicious GitHub Issue Was All It Took to Hijack a Claude Code Agent

Claude Code, una sola issue su GitHub poteva dirottare qualunque repository