Qwen Code

Mentions · 7d0
Mentions · 30d3
All mentions4
First seenSep 2, 2026
Last mentioned9d ago

Timeline

4 articles · newest first

Context compaction in coding agents can launder forged user instructions

Flattening harnesses accept forged approvals 87-100% of the time, while four role-typed harnesses reject the same attack.

arXiv cs.CROct 21, 15:24 UTC · 9d agoAI safety & security1 · 1 read

Sakana AI's self-improving model gets better at solving and judging, but can't catch its own blind spots

Sakana AI and UC Berkeley's MASS method lets Qwen3.6-27B self-improve at solving, judging, and workflow design.

The DecoderOct 12, 17:58 UTC · 18d agoAI research7 · 4 reads

Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th)

SANS published two Python scripts that reconstruct OpenCode and Hermes AI agent activity for forensic review.

SANS Internet Storm CenterOct 8, 16:52 UTC · 22d agoTools11 · 4 reads

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Malicious .git core.fsmonitor configs let attacker code run in AI coding agents like Claude Code and Codex; four of eight flaws remain unpatched.

The Hacker NewsSep 2, 14:06 UTC · Sep 2, 2026VulnerabilityCVE-2026-19592 CVE-2026-72718 CVE-2026-71963+37 · 3 reads

Related CVEs

by mentions

CVE-2026-71963<1%8.6
Command injection RCE in Hermes Agent via malicious .git/config
published Sep 3, 2026Hermes AgentPoC
CVE-2022-24346<1%7.8
In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible
published Feb 25, 2022jetbrains intellij idea
CVE-2021-4389113%7.8
Visual Studio Code Remote Code Execution Vulnerability
published Dec 15, 2021microsoft visual studio code
CVE-2026-55607<1%7.7
Claude Code: Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to worktrees outside the sandbox…
published Jun 29, 2026anthropic claude code
CVE-2026-19592<1%7.3
Unsandboxed attacker code execution in OpenAI Codex via malicious Git core.fsmonitor
published Sep 1, 2026OpenAI Codex CLI (Windows, macOS, and Linux)
CVE-2026-72718<1%7.0
goose is general-purpose AI agent that runs on your machine
published Aug 10, 2026

Appears with

Codexproduct · 3
Gemini CLIproduct · 2
Claude Codeproduct · 2
opencodeproduct · 2
Cursorproduct · 2
piproduct · 1
Sonarvendor · 1
Nous Researchorganization · 1
OpenAIvendor · 1
Alibabavendor · 1
SANSorganization · 1
GitHubvendor · 1
Hermes Agentproduct · 1
GPT-5.5ai model · 1
xAIorganization · 1
Clineproduct · 1

Entities are extracted by the model from each article. First seen Sep 2, 2026, last mentioned 9d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.