Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-23 · source-backed
A disclosed Cursor vulnerability let an attacker poison the agent's execution environment so an allowlisted command delivered an arbitrary payload. The allowlist made the attack easier, because it auto-approved exactly the command the attacker needed. (Lushbinary) Command allowlists are not a sandbox. OWASP's State of Agentic AI Security v2.01 catalogs this alongside CVE-2026-2256, a command-injection flaw in ModelScope's MS-Agent shell tool. Audit your "safe command" list for anything an attacker could repurpose, and run the agent in a real jail.
Each link below shares sources, entities, or timing with this story.
Cursor supports Claude / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Cursor supports Claude); both cover Agent, Audit, CVE; overlapping topics (agent, command).
Cursor benchmarked against Codex / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor benchmarked against Codex); both cover Agentic AI Security, OWASP, State; overlapping topics (agent, agentic).
Cursor uses MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Cursor uses MCP); both cover Agentic AI Security, OWASP, State; overlapping topics (agent, attack).
Claude Code competes with Cursor / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code competes with Cursor); both cover Audit, Cursor; overlapping topics (agent, attack, audit, cursor).
Cursor benchmarked against Codex / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Cursor benchmarked against Codex); both cover Agent, Command; overlapping topics (agent, command).
Cursor supports Claude / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Cursor supports Claude); both cover Agent, Cursor; overlapping topics (agent, cursor).
Claude Code competes with Cursor / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code competes with Cursor); both cover Agent, Cursor; overlapping topics (agent, cursor).
Cursor benchmarked against Windsurf / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor benchmarked against Windsurf); both cover Audit, Cursor; overlapping topics (attack, audit, cursor).