Plan
archived
ConfigPoisoning in DeepSeek-Reasonix Studio: git config can exec attacker code
- Platform/SRE — Skip
- CI/CD — Learn: The ConfigPoisoning class — attacker-controlled execution via .git/config and .gitattributes — is worth understanding when hardening pipelines that clone external or untrusted repos; the specific exploit requires the DeepSeek-Reasonix desktop client, but GitLab notes multiple coding agents share the same root flaw.
- Leader — Plan: GitLab’s research found the ConfigPoisoning class affects multiple widely-used AI coding agents, not just DeepSeek-Reasonix; if the org is standardizing on AI coding assistants, add security vetting of approved tools to the golden-path policy before broad rollout.
- Signals: CVE-2026-102437 — CISA KEV: not listed, EPSS 0.01
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.