Claude helped security researchers find RCE chains in Vim and Emacs in which just opening a file can silently execute code on your machine. opening a file or running git status triggers Git → malicious repo config runs attacker code → installs malware, steals your keys, etc. these are borderline not “bugs” from Vim or Emacs, more like unsafe trust boundaries and intended Git workflows, but they’re absolutely exploitable. security researchers can make this more clear.