AI coding agents vulnerable to malware from malicious files in Downloads folder

This report highlights a security risk where OpenAI's Codex AI coding agent was tricked into installing malware via a planted AGENTS.md file in the Downloads folder. The incident exposes vulnerabilities in AI systems that interact with local files, raising concerns about their safety and reliability.

Originally published by gnews