Agentjacking: Researchers Show How One Fake Bug Report Can Hijack AI Coding Agents

Tenet Threat Labs has demonstrated Agentjacking, an attack technique that shows how fake Sentry error reports could trick AI coding agents into running commands on a developer’s machine. The technique abuses the way AI coding assistants process untrusted error logs from Sentry, a popular application monitoring platform.

The Attack Method

According to Tenet’s blog post, Agentjacking does not require stolen passwords or direct access to a company’s internal network. In the demonstrated attack path, an attacker could inspect a website’s public source code to find its Sentry Data Source Name (DSN), a project identifier that is often exposed by design so applications can send error reports to Sentry.

With the exposed DSN, Tenet showed that an attacker could submit a fake error report to Sentry. The report used Markdown injection to disguise attacker-controlled text inside the issue content. If a developer then asked an AI coding agent to investigate...

Copyright of this story solely belongs to hackread.com. To see the full text click HERE