Get the brief

Security changes and incidents in AI coding tools

Breaches, vulnerabilities, security fixes and new safety controls in AI coding tools, with what to do if you are affected. 13 logged so far, covering 7 tools.

Saturday, November 14, 2026

Antigravity CLIsecurityAntigravity CLI 1.5.9 stops MCP auth headers leaking on redirectsVersion 1.5.9 stops custom MCP headers being forwarded to other hosts, and opens the run_workflow tool to everyone.

Friday, November 13, 2026

CursorsecurityCursor details breach that put a malicious Claude Code extension in its marketplaceCursor says an attacker used a vendor key to take agent traces and internal data, then served a tampered Claude Code extension to up to 5,000 users for about 11 hours.

Thursday, November 12, 2026

Antigravity CLIsecurityAntigravity CLI 1.5.7: Auto becomes the default mode, and an admin-review bypass is fixedNew sessions and headless runs now start in Auto mode, and a hook or allow rule can no longer skip admin-enforced review.

Wednesday, October 21, 2026

ZedsecurityZed 1.25.2 fixes secrets showing in the process list for remote agentsEnvironment variables and secrets for remote external agents and MCP servers could appear in the local process list.

Tuesday, October 6, 2026

Claude CodesecurityClaude Code 2.1.292 fixes a permission bypass for file reads from network pathsHook approvals and auto mode could let file reads from network shares skip the permission prompt.

Friday, September 25, 2026

CodexsecuritymacOS desktop app 26.924 patches CVE-2026-100754OpenAI shipped a macOS security update for the desktop app that fixes one CVE.

Wednesday, September 23, 2026

CursorsecurityCursor adds Rollouts and Security Review bots for Teams and EnterpriseTwo new pull-request bots: Rollouts watches deploys, and Security Review flags exploitable bugs with a proposed fix.

Tuesday, September 15, 2026

Gemini CLIsecurityGemini CLI 0.60.0 keeps credentials out of sandboxes and removes a bundled API keyVersion 0.60.0 stops container sandboxes from seeing host credentials and strips a hard-coded Google API key from the build.

Tuesday, September 8, 2026

Gemini CLIsecurityGemini CLI 0.59.0 blocks server-side request forgery in MCP OAuthVersion 0.59.0 hardens the MCP OAuth flow so a hostile MCP server can't make the CLI call internal network addresses.

Friday, August 14, 2026

Claude CodesecurityClaude Code 2.1.233 drops Todo tools on newer models and closes an NTLM leakBuilt-in task-tracking tools were switched off for current models, and a Windows path trick that could leak credentials was fixed.

Wednesday, August 5, 2026

ZedsecurityZed sandboxes the agent's terminal and fetch tools by defaultFrom Zed 1.14, the agent's terminal and fetch tools run inside an operating-system sandbox for all users.

Thursday, June 25, 2026

Gemini CLIsecurityGemini CLI 0.49.0 closes path-traversal holes in skill installsVersion 0.49.0 fixes three path-traversal flaws that let a malicious skill package write outside the skills folder.

Tuesday, June 23, 2026

ClinesecurityHigh-severity WebSocket hijack in Cline's dashboard (CVE-2026-59723)Cline published a CVSS 8.8 advisory: any website could take over a locally running Cline Hub dashboard.