--- title: "Security digest: August 5, 2026" url: https://erroneo.us/security/2026-08-05/ description: "August 5, 2026 vulnerability digest: 1 brief (Gemini CLI and Claude Code Flaws Expose CI Secrets); 1 CISA KEV addition (JetBrains); 1 critical advisory…" type: security-digest-day section: "Security Digest" date_published: 2026-08-05 date_modified: 2026-10-21 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: August 5, 2026 1 editorial brief, 1 known exploited (cisa kev) addition and 1 critical advisory. ## Take stock - Check exposure: Gemini CLI and Claude Code Flaws Expose CI Secrets . Teams running Gemini CLI or Claude Code in GitHub Actions or other CI on untrusted input, especially with pinned old versions, --yolo, or write-scoped tokens. - Do you run any of these? JetBrains TeamCity. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-08-08. - npm: 1 critical advisory ( @nuxt/devtools ). Check with npm audit (or: npm ls ) . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Editorial briefs - **Check exposure** [Gemini CLI and Claude Code Flaws Expose CI Secrets](https://erroneo.us/security/briefs/gemini-cli-claude-code-ci-agent-flaws/index.md): If an AI coding agent runs in your CI on content outsiders can write (issues, PRs, comments), check versions and workflow permissions this week; laptop users on auto-update already have the fixes. ## Known exploited (CISA KEV) - [CVE-2026-63077](https://erroneo.us/security/cve/CVE-2026-63077/index.md) JetBrains TeamCity: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability (CISA due 2026-08-08) ## Critical advisories - [CVE-2026-71319](https://erroneo.us/security/cve/CVE-2026-71319/index.md) Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host — npm @nuxt/devtools < 3.3.1 → 3.3.1 --- Source page: https://erroneo.us/security/2026-08-05/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt