How a Downloads Folder File Can Hijack Your AI Coding Agent
A plain text file dropped in Downloads can hijack your AI coding agent: Forever Security got Codex to run malware in over 90% of tests with no bug involved.
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.