HomeAI · summaries
Storia in 4 fonti
Claude Code, una sola issue su GitHub poteva dirottare qualunque repository
Una singola issue aperta da una finta GitHub App poteva aggirare i controlli della Claude Code GitHub Action e rubare via prompt injection i token per ottenere accesso in scrittura a qualunque repository. Anthropic ha corretto il problema nella v1.0.94
Confronto fonti
4 prospettive sulla stessa storiaTimeline cronologica
- ·
dev.to
Comment and Control: a GitHub comment hijacks Claude Code in CI
A security researcher showed that a GitHub PR title, issue body, or comment could become a prompt...
- ·
thenextweb.com
Claude Code GitHub Action flaw enabled repository hijacking
A flaw in Claude Code's GitHub Action let attackers bypass permission checks via fake bots and steal OIDC tokens through prompt injection.
- ·
thehackernews.com
Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories
A flaw in Anthropic’s Claude Code GitHub Action allowed a malicious GitHub issue from a bot actor to trigger workflows and gain write access to repos.
- ·
One Malicious GitHub Issue Was All It Took to Hijack a Claude Code Agent
A researcher disclosed a vulnerability in the Claude Code GitHub Action that let an attacker submit a...
- ·
hwupgrade.it
Claude Code, una sola issue su GitHub poteva dirottare qualunque repository
Una singola issue aperta da una finta GitHub App poteva aggirare i controlli della Claude Code GitHub Action e rubare via prompt injection i token per ottenere accesso in…