Coding agents vulnerable to malicious instruction files in Downloads folder

By PulseAugur Editorial · [10 sources] · 2026-11-03 13:58

Security researchers have identified a vulnerability where malicious Markdown files, such as AGENTS.md or CLAUDE.md, can be silently downloaded into a user's Downloads folder. When coding agents like Codex or Claude Code are then initiated in this folder, they can interpret these files as instructions, potentially leading to the execution of malware or unauthorized actions. Codex has shown a higher susceptibility to this attack, succeeding in over 90% of attempts, while Claude Code is less vulnerable but still susceptible around 50% of the time. Developers are advised to avoid using the Downloads folder for coding agent projects and to understand how these agents load their instruction files to mitigate the risk. AI

IMPACT Highlights a critical security flaw in AI coding assistants, urging users to secure their development environments and understand agent behavior.

RANK_REASON Security vulnerability report detailing how two specific AI coding tools can be exploited.

Read on r/ClaudeAI →

AI-generated summary · Google Gemini · from 10 sources. How we write summaries →

Coding agents vulnerable to malicious instruction files in Downloads folder

How we ranked this

Signal score: 0 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Tool; Security vulnerability report detailing how two specific AI coding tools can be exploited.
Source corroboration: 10 independent sources; Strong cross-source corroboration — multiple independent publishers covered this within the clustering window.
Topics: product, safety; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: High; Clearly on-topic for AI-industry coverage.
Story freshness: 4 days old; Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.
Coverage growth since scoring: +2 source(s) since last score; New sources have picked up this story since our last re-score. Score will update on the next scoring pass.

Full methodology in our editorial standards.

COVERAGE [10]

dev.to — Claude Code tag TIER_1 Français(FR) · Iliya Oblakov · 2026-11-05 14:17

A 7-point checklist before you let Codex review Claude Code commits

Claude Code writes, Codex reviews, a gate decides what merges. Here's the short version I check before trusting that loop on a repo. The full walkthrough, with the prompts, is in <a href="https://rayastats.com/en/blog/how-to-make-codex-review-claude-code-commits" rel="noopener…
dev.to — Claude Code tag TIER_1 English(EN) · lodar · 2026-11-05 02:19

How to run Claude Code and Codex together on one server

install 5dive on a linux server, sign in once to your claude plan and once to your chatgpt plan, then create agents on each. they run as separate linux services, share one task list and can check each other's work. 5dive is open source (MIT) and free to self-host. i run…
dev.to — Claude Code tag TIER_1 English(EN) · Rulestack · 2026-11-05 02:17

A web page can drop AGENTS.md or CLAUDE.md into ~/Downloads. Codex obeyed in over 90% of tries, Claude Code in about half

<blockquote> According to Forever Security, a web page can save a file into <code>~/Downloads</code> without a click, and a coding agent started in that folder reads the instruction file it finds there. On 2026-10-22 Forever Security reported catching a planted <code>AGENTS.md…
dev.to — Claude Code tag TIER_1 English(EN) · Iliya Oblakov · 2026-11-04 15:21

How to use Claude Code and Codex together: setup lessons from my review gate

If you want to use Claude Code and Codex together, the first decision is who does what. In my setup Claude Code writes the code and Codex reviews it read-only, and a small set of bash scripts refuses the merge unless the exact commit has a test pass and an ACCEPT. Most guides …
dev.to — Claude Code tag TIER_1 English(EN) · Iliya Oblakov · 2026-11-04 15:20

A planted AGENTS.md in Downloads: how to check your Claude Code and Codex setup

AGENTS.md and CLAUDE.md files are instructions that AI engines read at startup and follow. A security report published on 22 October 2026 shows what happens when one of those files lands somewhere you did not expect, and the folder it landed in was <code>~/Downloads</code>.</p…
dev.to — Claude Code tag TIER_1 Français(FR) · Iliya Oblakov · 2026-11-04 15:20

CLAUDE.md vs AGENTS.md: one rules file for Claude Code and Codex

Put the shared rules in <code>AGENTS.md</code>. By default, Claude Code reads that file directly from v2.1.277 when no <code>CLAUDE.md</code>, <code>.claude/CLAUDE.md</code> or <code>CLAUDE.local.md</code> sits in the working directory or any folder above it, and Codex reads i…
dev.to — LLM tag TIER_1 English(EN) · RisingInsight · 2026-11-07 11:56

StarPort: one local endpoint for Claude Code, Codex CLI and Cline — with credential pools and auto check-ins

I kept re-wiring configs between Codex CLI (Responses API), Claude Code (Anthropic Messages) and Cline/SDKs (Chat Completions), while my model access was scattered across several platforms — each with its own login, quota and credential format. So I wrote a gateway that collap…
dev.to — LLM tag TIER_1 English(EN) · TL;JP · 2026-11-06 13:14

Claude Code, Codex and the Downloads folder trap (Japan)

Originally published in <a href="https://plainaiphone.substack.com" rel="noopener noreferrer">TL;JP</a>, a weekly, fact-checked read on what Japanese AI and tech practitioners are saying on X. This is TL;JP for the week of Oct 27 - Nov 02, 2026. The most-liked …
r/ClaudeAI TIER_2 English(EN) · /u/holyhacker · 2026-11-06 21:44

I’m experimenting with Codex and Claude Code working on the same project. Here’s what I’m trying to solve.

<div class="md">I’m experimenting with Codex and Claude Code working on the same project. Here’s what I’m trying to solve. I’ve been using AI coding tools for a while, and lately I’ve been thinking about something that seems more complicat…
r/ClaudeAI TIER_2 English(EN) · /u/MiralAS_ · 2026-11-03 13:58

Switching from Codex to Claude Code - any tips on initial setup and keeping usage under control?

<div class="md">Hey guys, I'm about to switch from Codex to Claude Code, but I've never used Claude Code before. In Codex, I currently use sol 6.1 high/extra high mainly to help with game dev, web app development, and a few text-based things. But lately i…

How we ranked this

COVERAGE [10]

RELATED ENTITIES

RELATED TOPICS