The Cursor Allowlist Bypass That Starts With a File Named curl

Last week I shipped CVE-2026-22708 coverage to secops-toolkit-mcp, my toolkit of defensive SecOps helpers for AI coding agents. The CVE is a Cursor terminal allowlist bypass. A malicious file sitting in your project directory can turn an allowed command into an arbitrary one. Then I tested the check against the actual exploit pattern. It caught...