Elad Meged

Main Stage·19 min

• DEF CON
• AI Security
• Date: Aug 2026
• Location: Las Vegas

Elad Meged

Shows how a project config file loaded before Gemini CLI's sandbox starts gave attackers host code execution in CI, and how to audit similar pre-task inputs.

Main Stage·43 min

• DEF CON
• AI Security
• Date: Aug 2026
• Location: Las Vegas

Elad Meged

Shows how the sandboxes in Claude Code, Gemini CLI and Codex CLI fail in CI automation, through permission, environment and kernel-level gaps.