High 8.6
CVE-2026-72718
GitSpawn Remote Code Execution Vulnerabilities Disclosed Across Multiple AI Coding Agents
Vendor / product: AI Coding Agents (Goose, OpenAI Codex, Claude Code, Hermes)
Event date: 2026-09-01
Public PoC: Yes
First tracked by RiskWire: 2026-09-03
Sources & citations (1)
- Why Opening a Folder Became Remote Code Execution medium.com · 2026-09-03
References
See CVE-2026-72718 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →