Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories

A security researcher discovered a critical flaw in Anthropic's Claude Code GitHub Action enabling repository takeover via one malicious GitHub issue.

• •Permission check incorrectly allowed any GitHub App bot to trigger the action
• •Attackers used prompt injection to extract OIDC credentials from environment variables
• •Stolen credentials enabled write access to repository code and workflows
• •Flaw rated CVSS 7.8 and fixed in version v1.0.94
• •Similar attacks compromised credentials in other AI-assisted CI/CD systems

This summary was automatically generated by AI based on the original article and may not be fully accurate.