18:49
2026-08-27
dev.to
ai-tools
CVE-2026-35603: Cursor Still Trusts a World-Writable Folder
Cymulate Research Lab disclosed CVE-2026-35603, a privilege escalation vulnerability in AI coding tools including Claude Code, Cursor, Codex CLI, and Gemini CLI. The flaw allows any standard user to pā¦