CVE-2026-22708

mentions 2 type Organization feed RSS

// recent coverage 2 mentions

04:31

2026-09-07

dev.to

ai-safety

The Cursor Allowlist Bypass That Starts With a File Named curl

A developer shipped CVE-2026-22708 coverage to secops-toolkit-mcp, a toolkit of defensive SecOps helpers for AI coding agents. The CVE is a Cursor terminal allowlist bypass where a malicious file in a…

13:00

2026-08-18

docker.com

ai-safety

Coding Agent Horror Stories: The Command You Already Approved

On January 14, 2026, Pillar Security disclosed CVE-2026-22708, a high-severity flaw in Cursor that allowed shell built-ins like export, typeset, and declare to execute without appearing in the allowli…

// co-occurs with top 4 entities

Cursor 2 Pillar Security 1 Docker Sandboxes 1 secops-toolkit-mcp 1

// topics top 4 topics

ai safety 2 ai agents 2 ai tools 1 developer tools 1