Tag

#developer-tools

3 stories · “developer-tools”.

Mistral AI co-founder and CEO Arthur Mensch speaking on stage at the Techarena 2026 conference under blue stage lighting.

Sep 21, 2026

Mistral Vibe Ran a Repository's Git Hooks Before Trust Checks, Enabling RCE

CVE-2026-93993 is a CVSS 8.8 remote-code-execution flaw in Mistral Vibe. Its --worktree flag ran a repo's post-checkout git hook before trust validation.

By TPW Editorial8 min read

The wordmarks of Claude, OpenAI, GitHub Copilot and Google Gemini in white on a dark background with a red slash motif; a September 2026 flaw affected the plugin systems of all four AI coding agents.

Sep 19, 2026

A Zero-Click Flaw Let Malicious Plugins Run Code in Four Major AI Coding Agents

Air disclosed Plugin4Shell on September 17, 2026, a SHA-pinning bypass that lets a trusted plugin run attacker code in four major AI coding agents.

By TPW Editorial7 min read

Developers working at laptops displaying code during a coding event

Sep 12, 2026

OpenAI Opens the Agents API, Selling the Harness Behind Codex

OpenAI's Agents API puts its managed Codex harness behind one API call, handling orchestration and sandboxes, while data residency stays US-only in beta.

By TPW Editorial9 min read