Threat · curated 30 Jun 2026
GuardFall: a universal shell injection vulnerability in open-source AI agents
First reported · updated · 2 reports adversa.ai
Coverage timeline
Why it matters
GuardFall shows that AI coding agents' security filters can be trivially bypassed with classic shell injection tricks, exposing organizations to remote code execution under the agent's privileged identity.
GuardFall, disclosed by Adversa AI, is a universal shell injection vulnerability affecting open-source AI coding agents, where decades-old shell injection techniques bypass the agents' modern command-filtering safeguards. Because these agents run shell commands with the operator's full account authority, the flaw enables command execution across a surveyed cohort of 11 popular open-source agents.