#deepseek-reasonix

October 3, 2026

Viewing a git diff can execute attacker code in an AI coding agent. GitLab's Threat Research Group disclosed ConfigPoisoning (CVE-2026-102437) in DeepSeek-Reasonix Studio: the tool hardens several git config keys against injection but misses filter.<driver>.clean, which git selects per file through .gitattributes rather than a fixed config key. A malicious repo's own .git/config and .gitattributes are enough. GitLab says multiple widely used coding agents share this vulnerability class and this is the first disclosed in full; fix is Studio 2.21.0 or npm 1.39.3, and repos cloned over HTTPS/SSH from GitLab don't carry local config (GitLab). · AI & Model Security