Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-11 · source-backed
Tenet Security showed at DEF CON 34 that Sentry's unauthenticated ingest endpoint lets anyone with a public DSN POST a crafted error event whose message fields contain markdown reading like remediation guidance. Ask Claude Code or Cursor to debug Sentry issues, and the agent pulls the injected event through MCP and executes it with local privileges. 85% success across 100+ organizations in controlled testing; 2,388 orgs found with publicly discoverable DSNs, 71 in the Tranco top-1M. Sentry added a payload-string filter but declined platform-level remediation as "technically not defensible." No CVE assigned. Mitigation repo is tenet-security/agent-jackstop, shipping deny-by-default egress allowlists.
Each link below shares sources, entities, or timing with this story.
Cursor uses MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor uses MCP); both cover Agentjacking, Cursor, MCP, Sentry; overlapping topics (agent, agentjacking, claude, code, event).
Claude Code uses MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover Cursor, MCP, Sentry; overlapping topics (added, agent, claude, code).
VS Code supports MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (VS Code supports MCP); both cover Cursor, MCP, RCE; overlapping topics (claude, code).
Cursor uses MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor uses MCP); both cover Cursor, MCP, RCE; overlapping topics (agent, claude, code).
Claude Code uses MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code uses MCP); both cover Cursor, MCP; overlapping topics (agent, claude, code).
VS Code supports MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (VS Code supports MCP); both cover Cursor, MCP; overlapping topics (agent, claude, code).
Linked by a graph relationship (VS Code supports MCP); both cover Cursor, MCP; overlapping topics (agent, claude, code).
OpenAI supports MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (OpenAI supports MCP); both cover Cursor, MCP; overlapping topics (agent, claude, code).