Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

Vulnerabilities in widely adopted AI developer tools — Claude Code, Gemini CLI, and OpenAI Codex — allowed attackers to escalate from a simple GitHub issue submission to full code execution on CI runners, potentially exfiltrating workflow secrets and environment variables. The root cause lies in insufficient input sanitization and trust boundary enforcement within tools that are deeply integrated into software supply chains. Because these CLI agents operate with elevated privileges in automated pipelines, a single exploitable flaw can compromise entire build and deployment environments. This matters because AI coding assistants are rapidly becoming critical infrastructure in development workflows, yet their security posture often lags behind their adoption rate.