Zero‑Privilege GitHub Issue Lets Attackers Hijack Anthropic, Google, and OpenAI CI Runners
A single GitHub issue, submitted by an account without repo rights, can trigger remote code execution on the CI runners of Anthropic’s Claude Code, Google’s Gemini CLI, and OpenAI’s Codex. The flaw lets attackers steal API tokens, hijack subsequent agent runs, and potentially compromise downstream software supply chains.