Friendly Fire: Hijacking Defensive Cyber AI Agents for Remote Code Execution

Exploit Brief We are revealing a proof-of-concept exploit that enables remote code execution in Anthropic’s Claude Code CLI (with Claude Sonnet 4.6 & 5, Opus 4.8) and OpenAI’s Codex CLI (with GPT-5.5) when employed to defensively assess the security of an open-source or third-party library. Our attack only requires an out-of-the-box configuration of Claude Code […] The post Friendly Fire: Hijacking Defensive Cyber AI Agents for Remote Code Execution appeared first on AI Now Institute .