The Permission Prompt Is the Attack Surface: AI Coding Agent Security in October 2026
Every release note this week was about steering, context or sandbox flags. The security story is smaller and worse: the approval dialog is now an input channel, and a saved allow-rule is a standing bypass. Here is the research, the CVEs behind it, and a permission model that survives an untrusted repo.
Devdatta Narawade13 min