Qwen Code security
The Qwen team's open-source coding agent for the terminal.
The Injection has tracked 2 security stories affecting Qwen Code since September 18, 2026 (benchmark 1, research 1). The most recent, disclosed October 6, 2026, is "HarnessSecurity-Bench: auto-approve lifts attack success to 95.6%".
2
Stories
0
High or critical
0
With a CVE
2026-10-06
Latest disclosure
Every Qwen Code story
INFO
Benchmark · arXiv
HarnessSecurity-Bench: auto-approve lifts attack success to 95.6%HarnessSecurity-Bench tests nine security mechanisms across six coding agent harnesses and reports that enabling auto-approve raises attack success from 29.2% to 95.6%, while command denylisting cut attack effects with a utility gain.
MED
Research · arXiv
Explosive prompts: dormant injections fire on 'thanks' in agentsExplosive prompts are dormant prompt injections that wait for a harmless trigger such as 'thanks'. A new paper reports 43% to 83% success on nine production agents, versus at most 3% for plain injections, and proposes the DeFuse detector.
Questions people ask
- Does Qwen Code have known security vulnerabilities?
- The Injection has tracked 2 stories about Qwen Code, none of them with a published CVE yet. Several cover attacks or research that apply to it; each story lists what to do.
- What is the latest Qwen Code security issue?
- The most recent story is "HarnessSecurity-Bench: auto-approve lifts attack success to 95.6%" (info severity), disclosed October 6, 2026 by arXiv. HarnessSecurity-Bench tests nine security mechanisms across six coding agent harnesses and reports that enabling auto-approve raises attack success from 29.2% to 95.6%, while command denylisting cut attack effects with a utility gain.
- Which attack techniques have been used against Qwen Code?
- Stories about Qwen Code on The Injection most often involve coding agents, prompt injection, indirect prompt injection, detection. Each technique has a glossary entry with a definition and every related story.