Bash

A security research report details 'Beltdown', a sandbox escape in Anthropic's Claude Code. By manipulating git configuration files and exploiting unhardened git commands, attackers could execute code on the host system.

QuoteBench is a new benchmarking framework that exposes how the execution environment of LLM agents can corrupt Bash commands through parsing errors. It demonstrates that high 'matched' success scores often hide significant failures occurring at the boundary between model output and shell execution.

StateAct is a new multi-agent harness designed to improve the reliability of autonomous computer-use agents by focusing on program state rather than just screenshots. By allowing agents to interact directly with underlying data like files and code, it achieves higher success rates at a much lower computational cost.