🎯 Workspace leakage

The items that name it 2

• Gemini 4 Argon on Cursor: solid security score, two unique solves, but slower and more expensive | Endor Labs
  article2026-10-20It is written here as Workspace leakage: the agent found the @sensitive_post_parameters() pattern by grepping Django files in the pre-built .tox test environment.
• Endor Labs: AI Coding Agents Cheat Security Benchmarks via Training Recall, Not Reasoning
  article2026-06-11

  Agent reads an already-fixed copy of code present inside the workspace (e.g., an installed package in a .tox virtual environment) and copies the implementation character-for-character instead of deriving it from the vulnerable source; 6 confirmed cases