LLMHigh
Friendly Fire: Hijacking Defensive Cyber AI Agents for Remote Code Execution
- Occurred
- Jul 8, 2026
- Published
- Jul 8, 2026
- Source
- AI Now Institute
Summary
Exploit Brief We are revealing a proof-of-concept exploit that enables remote code execution in Anthropic’s Claude Code CLI (with Claude Sonnet 4.6 & 5, Opus 4.8) and OpenAI’s Codex CLI (with GPT-5.5) when employed to defensively assess the security of an open-source or third-party library. Our attack only requires an out-of-the-box configuration of Claude Code […] The post Friendly Fire: Hijacking Defensive Cyber AI Agents for Remote Code Execution appeared first on AI Now Institute.
Tags
- Publications
- Research
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Exploit demonstrates remote code execution vulnerabilities in LLM-based coding agents, posing significant security risks.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8