Researchers demonstrated 'conversation history poisoning' across Claude Code, Codex, Kiro-CLI, and Pi. A single malicious ...
The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query ...