Fake Bug Report Hijacks AI Coding Agents at Scale

Summary

A new attack vector, dubbed 'agentjacking,' allows threat actors to hijack AI coding agents by submitting malicious bug reports. These reports exploit the AI's inability to distinguish between content and executable instructions, leading to the agent executing attacker-provided code. This technique demonstrates a significant security risk for AI-powered development tools.

Entities