{
  "entry": {
    "kind": "vuln",
    "slug": "chaindrop-opening-a-repository-is-enough-to-execute-attacker-code",
    "name": "chaindrop-opening-a-repository-is-enough-to-execute-attacker-code",
    "vendor": "Opening a Repository Is Enough to Execute Attacker Code",
    "description": "Pillar Security and Microsoft threat intelligence both documented ChainDrop, a self-propagating supply chain compromise where merely opening a repository is sufficient to run attacker code, with no build step and no explicit consent. Once running it spreads onward, which is what turns a single poisoned repository into a worm rather than a single victim.",
    "website": "https://www.microsoft.com/en-us/security/blog/2026/08/04/chaindrop-supply-chain-compromise-anatomy-self-propagating-worm/",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": null,
    "configFiles": null,
    "category": "agent",
    "updatedAt": "2026-08-04",
    "risk": {
      "score": 90,
      "band": "critical",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "chaindrop-opening-a-repository-is-enough-to-execute-attacker-code",
      "aliases": [
        "ti-066"
      ],
      "title": "ChainDrop: Opening a Repository Is Enough to Execute Attacker Code",
      "summary": "Pillar Security and Microsoft threat intelligence both documented ChainDrop, a self-propagating supply chain compromise where merely opening a repository is sufficient to run attacker code, with no build step and no explicit consent. Once running it spreads onward, which is what turns a single poisoned repository into a worm rather than a single victim.",
      "severity": "critical",
      "cvss": {
        "score": null,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Remote code execution",
        "Supply chain compromise",
        "Malware"
      ],
      "componentType": "agent",
      "component": {
        "name": "Opening a Repository Is Enough to Execute Attacker Code",
        "vendor": null,
        "package": null,
        "ecosystem": null,
        "catalogSlug": null
      },
      "affected": [
        {
          "range": null,
          "fixed": null
        }
      ],
      "exploited": true,
      "exploitPublic": false,
      "publishedAt": "2026-08-04",
      "modifiedAt": "2026-08-04",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://www.microsoft.com/en-us/security/blog/2026/08/04/chaindrop-supply-chain-compromise-anatomy-self-propagating-worm/"
        }
      ],
      "mitigation": "Disable automatic execution of workspace-scoped configuration when opening untrusted repositories, and keep folder-trust prompts enabled rather than blanket-trusting parent directories. Review any repository opened from an untrusted source for editor and agent config that runs on open.",
      "detectedByAnomity": true
    }
  }
}