--- title: "Security digest: September 1, 2026" url: https://erroneo.us/security/2026-09-01/ description: "September 1, 2026 vulnerability digest: 1 brief (GitSpawn); 1 critical advisory (PyPI). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2026-09-01 date_modified: 2026-10-21 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: September 1, 2026 1 editorial brief and 1 critical advisory. ## Take stock - Patch this week: GitSpawn . Developers and teams running Claude Code, Codex, Cursor, goose, Hermes Agent, Qwen Code or Grok Build on repositories received as archives, shared drives, sync folders or USB media, and any service that runs an agent over uploaded repositories. - PyPI: 1 critical advisory ( nltk ). Check with pip-audit (or: pip show ) . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Editorial briefs - **Patch this week** [GitSpawn: Repo Git Config Runs Code in AI Coding Agents](https://erroneo.us/security/briefs/gitspawn-git-fsmonitor-ai-coding-agents/index.md): Update your coding agents this week and never point one at a repository that arrived as files until you have read its .git/config; ordinary clones are not affected, and no attacks have been reported. ## Known exploited (CISA KEV) None. ## Critical advisories - [CVE-2026-79675](https://erroneo.us/security/cve/CVE-2026-79675/index.md) NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841) — PyPI nltk <= 3.10.2 → 3.10.3 --- Source page: https://erroneo.us/security/2026-09-01/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt