{"slug": "guardfall-shell-injection-hits-10-of-11-ai-coding-agents", "title": "GuardFall: Shell Injection Hits 10 of 11 AI Coding Agents", "summary": "Adversa AI researcher Omer Ben Simon published GuardFall, a class of shell injection bypasses that defeats command guards in 10 of 11 popular open-source AI coding agents, collectively holding roughly 548,000 GitHub stars. The vulnerability stems from a structural gap between command text checks and actual bash execution, and most affected teams have not shipped the two-day fix two weeks after disclosure.", "body_md": "On June 30, Adversa AI researcher Omer Ben Simon published GuardFall — a class of shell injection bypasses that defeats the command guards in 10 of 11 popular open-source AI coding agents. The affected tools collectively hold roughly 548,000 GitHub stars. The fix is a two-day engineering task. Two weeks later, most teams haven’t shipped it. The vulnerability is structural, not cosmetic. Most agents guard against dangerous commands by checking raw command text — regex patterns, string matching. But bash rewrites commands before it executes them. The guard and the shell end up looking at two different things. That gap […]\n\nThe post", "url": "https://wpnews.pro/news/guardfall-shell-injection-hits-10-of-11-ai-coding-agents", "canonical_source": "https://byteiota.com/guardfall-ai-agent-shell-injection/", "published_at": "2026-07-13 01:10:18+00:00", "updated_at": "2026-07-13 01:14:38.576938+00:00", "lang": "en", "topics": ["ai-safety", "ai-agents", "ai-tools"], "entities": ["Adversa AI", "Omer Ben Simon", "GuardFall"], "alternates": {"html": "https://wpnews.pro/news/guardfall-shell-injection-hits-10-of-11-ai-coding-agents", "markdown": "https://wpnews.pro/news/guardfall-shell-injection-hits-10-of-11-ai-coding-agents.md", "text": "https://wpnews.pro/news/guardfall-shell-injection-hits-10-of-11-ai-coding-agents.txt", "jsonld": "https://wpnews.pro/news/guardfall-shell-injection-hits-10-of-11-ai-coding-agents.jsonld"}}