erroneo.us
Search all guides⌘K

Digest · Tuesday

Security digest: September 1, 2026

1 editorial brief and 1 critical advisory.

All digests · RSS · Markdown

Take stock

  • Patch this week: GitSpawn. Developers and teams running Claude Code, Codex, Cursor, goose, Hermes Agent, Qwen Code or Grok Build on repositories received as archives, shared drives, sync folders or USB media, and any service that runs an agent over uploaded repositories.
  • PyPI: 1 critical advisory (nltk). Check with pip-audit (or: pip show <package>).
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Patch this week

· AI agent security · CVE-2026-19592, CVE-2026-19590

GitSpawn: Repo Git Config Runs Code in AI Coding Agents

Update your coding agents this week and never point one at a repository that arrived as files until you have read its .git/config; ordinary clones are not affected, and no attacks have been reported.

Must act: Developers and teams running Claude Code, Codex, Cursor, goose, Hermes Agent, Qwen Code or Grok Build on repositories received as archives, shared drives, sync folders or USB media, and any service that runs an agent over uploaded repositories.

Can relax: People who only run agents inside repositories they cloned themselves from a known remote, because a normal git clone does not copy the source repository's local .git/config.

  1. Update every agent: Claude Code (claude update), Codex CLI 0.131.0 or later (npm i -g @openai/codex@latest), goose 1.44.0 or later, and Hermes Agent to a build containing commit f6234d0.
  2. Before opening a repository that arrived as files, run git config --local --list in it and remove any core.fsmonitor, core.hooksPath or filter/diff driver entries you did not set.
  3. Prefer a fresh git clone from the authenticated remote over unpacking someone else's working copy; a clone drops their local config.

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 1

GitHub-reviewed advisories rated critical, published this day (Pacific time).

PyPI 1

Check: pip-audit (or: pip show <package>)