I found a COMMAND_INJECTION in a 25k ⭐ AI coding assistant (in 3 seconds) (opens in new tab)

Last week I scanned serena — a popular AI coding assistant with 25k ⭐. [BLOCK] COMMAND_INJECTION agent.py:1222 subprocess.Popen(cmd, shell=True) → config value → arbitrary shell execution The scan took 3 seconds. The bug had been in the repo for months. What COMMAND_INJECTION looks like in AI code # AI generates this pattern constantly def run_command(user_config: dict): cmd = f"git {user_config['args']}" subprocess.Popen(cmd, shell=True) # BLOCK: arbitrary shell execution Any config value be...