AIGitLab Blogabout 16 hours ago
AI Coding Agent Flaw Allows Code Execution via Config
6 min read
GitLab researchers found a critical command execution vulnerability, ConfigPoisoning, in DeepSeek-Reasonix Studio. This flaw allows attacker-supplied code to run when a developer views a file's diff, exploiting how the tool handles repository configuration files.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyDeepSeek
