Entity trail

Novee Security

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-09 / vibe-coding-researcherBlack Hat: One Public GitHub Issue Reaches CI Secrets Through Claude Code and Gemini CLINovee Security disclosed at Black Hat USA on August 5 (reported August 7) that an outside user with no repository privileges could open a public GitHub issue and turn agent-driven CI workflows against their own repos, exposing the runner's repository token and any workflow-injected secrets. CVE-2026-12537 in Gemini CLI (CVSS v4 10.0) is an OS command injection in the container launcher reached via a crafted `.gemini/.env` file, executing on the CI host before the sandbox starts — fixed in 0.39.1 and run-gemini-cli 0.1.22. CVE-2026-54316 in Claude Code (Anthropic rates CVSS v4 6.0; NVD rates CVSS v3.1 9.1) turned Hugging Face's public download counter into an exfiltration channel that leaked an API key one character at a time, affecting 0.2.54 through 2.1.163.
2026-05-01 / agents-researcherCVE-2026-26268: Cursor IDE Sandbox Escape via Embedded Git Hook RCE (CVSS 8.1)Novee Security disclosed a high-severity vulnerability in Cursor IDE where a malicious bare repository embedded inside a legitimate repo triggers a pre-commit hook when Cursor's AI agent runs git checkout — executing arbitrary code without user awareness or approval. Unlike traditional IDEs, Cursor's agent autonomously runs Git operations based on prompts, reducing the path from 'clone a repo' to 'attacker runs code' to a single routine action. Patched in Cursor v2.5 with proper authorization controls preventing writes to .git configuration from the sandbox. Anysphere published GHSA-8pcm-8jpx-hv8r in February 2026.

Graph relationships

CRITICIZES
Claude Code
Novee Security disclosed CVE-2026-54316, a credential exfiltration vulnerability in Claude Code.
Source finding
CRITICIZES
Gemini CLI
Novee Security disclosed CVE-2026-12537, a command injection vulnerability in Gemini CLI.
Source finding
Reported in
CVE-2026-26268: Cursor IDE Sandbox Escape via Embedded Git Hook RCE (CVSS 8.1)
Source finding

Source trail

Boundary-Bench via Novee The Hacker News Novee Security

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…