Misbehavior1 sourceFirst seen 08/20/2025

Picture from the embracethered.com article — Image: embracethered.com

Amazon Q Takes Orders From Text Nobody Can See

Ourtake

A coding agent that edits your files should not be taking instructions from characters your eyes cannot see.

What happened

A security researcher showed that Amazon Q Developer for VS Code did not strip invisible Unicode Tag characters, so hidden instructions in a file could steer the Claude-based coding agent, including invoking tools. The issue was disclosed to AWS in July 2025, and AWS reported it resolved by August 8, 2025, with no public CVE planned.

Source

embracethered.com · 08/20/2025Amazon Q Developer for VS Code Vulnerable to Invisible Prompt Injection (opens in a new tab)