MisbehaviorSerious1 sourceFirst seen
Amazon Q Developer Ping Leaks Your .env Like It's Gossip at a Coffee Shop
Ourtake
The ping command was on the 'harmless' list. Nobody asked the list what harmless means when secrets are involved.
What happened
Security researcher Johann Rehberger found that Amazon Q Developer, a VS Code coding agent with over 1 million downloads, could be prompt-injected via a code comment into reading a .env file and leaking its contents through DNS requests using ping, without developer consent. Amazon confirmed and quietly patched the issue without publishing an advisory or CVE.