Unverified50% confidenceFactExact time
The attack entry point was a malicious dataset that exploited two code execution paths: a remote code dataset loader and a configuration template injection.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/7/2026
First Seen
Valid until: 12/6/2026
Sources
Related Entities
Related Claims
Unverified该漏洞的技术本质是PATH劫持攻击，Cursor执行Git操作时会从项目目录中查找并调用git可执行文件71% similarUnverifiedQR code access carries security risks including replay attacks, session credential leakage due to long-lived tokens, and man-in-the-middle attacks.70% similarUnverifiedPayload是在漏洞利用过程中发送给目标系统的恶意代码或数据70% similarUnverifiedAttack surface is a cybersecurity concept referring to the sum of all possible entry points in a system that an attacker could exploit, typically categorized into three types: network attack surface, software attack surface, and human attack surface.69% similarUnverifiedDirectly executing Skill code downloaded from the internet or autonomously generated by an agent in the host environment poses security risks, as it may contain dangerous operations such as deleting files, accessing sensitive directories, or launching network attacks.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/869835API
curl https://kongchang.com/api/v1/knowledge/claims/869835MCP
get_claim(id=869835)