{"id":116,"date":"2026-10-29T07:03:07","date_gmt":"2026-10-29T07:03:07","guid":{"rendered":"https:\/\/bugskan.com\/?p=116"},"modified":"2026-10-29T07:03:08","modified_gmt":"2026-10-29T07:03:08","slug":"nvidia-showed-how-dependency-installation-can-bypass-an-agents-blocked-command-path","status":"publish","type":"post","link":"https:\/\/bugskan.com\/index.php\/2026\/10\/29\/nvidia-showed-how-dependency-installation-can-bypass-an-agents-blocked-command-path\/","title":{"rendered":"NVIDIA showed how dependency installation can bypass an agent\u2019s blocked-command path"},"content":{"rendered":"<p>NVIDIA\u2019s October 2025 research examined developer agents with permission to operate a local machine. In one demonstration, a direct malicious instruction was blocked, while a pull-request workflow induced installation of a package containing a hidden payload.<\/p>\n<p>The lesson is about the whole execution path: installing a dependency can execute code even when an agent refuses an obviously dangerous command. This was research, not evidence that every Cursor installation or AI provider had been breached.<\/p>\n<p>Run autonomous development work in an isolated environment, restrict access to credentials and require review before installing unfamiliar dependencies. Approval policies should consider indirect execution as well as explicit shell commands.<\/p>\n<p><a href=\"https:\/\/developer.nvidia.com\/blog\/from-assistant-to-adversary-exploiting-agentic-ai-developer-tools\">Read the original source<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A controlled developer-agent test succeeded through a malicious package after a more direct command attempt was blocked.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"bugskan_incident_id":"inc_53439d93ef0b3d","bugskan_event_type":"research","bugskan_response":"unknown","bugskan_technical_severity":"","bugskan_technical_severity_source":"","bugskan_evidence_quality":"high","bugskan_affected_scope":"Controlled developer-agent attack demonstrations reported by NVIDIA.","bugskan_recommended_next_step":"Isolate autonomous agents and review dependency installation as code execution.","bugskan_who_should_check":"","bugskan_material_updated_at":"2025-10-09T00:00:00Z","bugskan_reviewer_name":"","bugskan_reviewed_at":"","bugskan_legacy_state":"mapped","bugskan_featured":false,"bugskan_sample":false,"footnotes":""},"categories":[1],"tags":[],"bugskan_format":[3],"bugskan_technology":[],"class_list":["post-116","post","type-post","status-publish","format-standard","hentry","category-uncategorized","bugskan_format-research-explained"],"_links":{"self":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/116","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/comments?post=116"}],"version-history":[{"count":1,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/116\/revisions"}],"predecessor-version":[{"id":341,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/116\/revisions\/341"}],"wp:attachment":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/media?parent=116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/categories?post=116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/tags?post=116"},{"taxonomy":"bugskan_format","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_format?post=116"},{"taxonomy":"bugskan_technology","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_technology?post=116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}