Wednesday, May 6, 2026 · 1 of 5
"Comment and Control" prompt injection
(May ~5) — Malicious PR titles and issue bodies can hijack Claude Code (CVSS 9.4), Gemini CLI, and GitHub Copilot agents to exfiltrate credentials; all three patched quietly with no CVEs published. Update now.