paperSeptember 2026UnreviewedOpen access

The Double-Edged Sword of AI Pair Programmers: A Systematic Literature Review of Security Vulnerabilities in AI-Generated Code and Agentic Development Environments

Mahmoud E. Farfoura, M. Alia, Ibrahim Mashal, Adnan A. Hnaif, M. Odeh

Journal of Sustainable Smart Systems in Education & Environment

Abstract

The role of AI pair programmers has expanded from local code completion to active participation in the development environment. Contemporary tools can interpret repository context, edit multiple files, call package managers, execute terminal commands, and communicate with external services. This review synthesizes security evidence concerning GitHub Copilot, ChatGPT-based coding, code large language models, Cursor-style agentic editors, command-line coding agents, and Model Context Protocol ecos

Cite

@article{farfoura2026doubleedged,
  title = {{The Double-Edged Sword of AI Pair Programmers: A Systematic Literature Review of Security Vulnerabilities in AI-Generated Code and Agentic Development Environments}},
  author = {Mahmoud E. Farfoura and M. Alia and Ibrahim Mashal and Adnan A. Hnaif and M. Odeh},
  year = {2026},
  month = sep,
  journal = {Journal of Sustainable Smart Systems in Education \&amp; Environment},
  doi = {10.66823/2egmd793},
  url = {https://www.semanticscholar.org/paper/f68e78d6c07988ee249898866e6cf165d2adb5a5}
}