BSidesSF 2026 - Not My Vibe: When AI Coding Agents Go Off the Rails (Aonan Guan, Zhengyu Liu)

This talk explores a critical new attack surface in command-line interface (CLI) AI agents, presented by Aonan Guan and Zhengyu Liu. The speakers analyze systemic flaws found in popular coding agents like Gemini CLI, Claude Code, and Codex, highlighting issues such as command injection, workspace escapes, and cross-process remote code executions (RCEs). They demonstrate real exploits, which have been responsibly fixed, and provide insights for developing safer, sandboxed, and verifiable AI agents.