GitSpawn Flaws Let Malicious Repositories Execute Code in Claude Code, Codex, Cursor, and Grok

Researchers disclosed "GitSpawn," a class of vulnerabilities where malicious repositories carrying a .git directory can execute arbitrary local commands when AI coding agents run background git operations (e.g., git status), leveraging config keys like core.fsmonitor; multiple popular agents were shown vulnerable, some fixes and CVEs have been issued while other issues remain unpatched—users should inspect .git/config and vendors should sanitize git config during context gathering.