GitSpawn Exploit Disclosed: Attackers Target Autonomous Coding Agents

The Cloud Security Alliance and Manifold Security disclosed "GitSpawn," a critical vulnerability affecting autonomous coding agent environments where malicious repositories bypass user consent prompts. Attackers embed weaponized configuration scripts in Git submodules that execute arbitrary shell commands automatically during initial agent repository analysis before security prompts appear.