Hidden Image Instructions Hack Code Agents
sunychoudhary · reddit · 2026-07-13
Researchers designed an attack called Ghostcommit: hiding malicious instructions inside PNG images, making them invisible to AI code reviewers.
The workflow: During the review phase, the AI reviewer doesn't open images, so it approves the PR. Later, when the code agent reads the image, it is instructed to open the repo's .env file and write the secrets back into the source code disguised as numbers, leading to a leak.
This demonstrates that:
- Visual files can serve as prompt injection vectors
- Relying solely on an initial AI review is unreliable
- Structured permission controls and human oversight are still required for sensitive operations
Related event: Ghostcommit Attack Hides Prompts in PNGs to Bypass AI Code Review(2 posts)→
More from coding & agent
- SF 'Code Engineering' event picks up where 1,000-person harness engineering meetup left off — LangChain · 2026-10-27
- Prompt turns Claude Code into an iPhone backup forensics tool exposing 30-day 'deleted' photo copies — alex_verem · 2026-10-27
- Prompt turns Claude Code into a forensics tool finding deleted iPhone photos in backups — alex_verem · 2026-10-27
- Phones won't be mobile IDEs but control planes for agent fleets, argues Yuchen Jin — Yuchenj_UW · 2026-10-27
- FrontierCS 2 launches on Kaggle: 48 tasks make agents beat published CS papers — MeganRisdal · 2026-10-27
- Stop remaking old games with AI: a call for more ambitious agentic software — rschu · 2026-10-27