Unverified50% confidenceFactExact time
The update fixes a TOCTOU race condition vulnerability in file tools (Read, Write, Edit) where, after permission checks passed, replacing a symbolic link within the working directory could result in reading or writing files outside the authorized scope
1
Sources
50%
Confidence
Long-term
Relevance
9/11/2026
First Seen
Sources
Related Entities
Related Claims
Unverified新版 go fix 以保留原始格式和注释的方式将修改写回源文件68% similarUnverified修改Cursor本体文件可能导致软件更新后出现兼容性问题，且这种修改方式并非官方支持的汉化途径66% similarUnverified作者建议任何会修改注册表的工具都应在运行前先读一遍源码61% similarUnverified开发者应对措施包括升级到官方最新版本、撤销并轮换现有API Key、检查历史调用日志确认异常访问60% similarUnverifiedThe new version fixed credential leakage risks where /ultrareview and local cloud sessions could upload uncommitted prod.env, *.tfvars files, as well as editor temporary files and backup credential files; these files will now remain local and no longer be uploaded.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/897974API
curl https://kongchang.com/api/v1/knowledge/claims/897974MCP
get_claim(id=897974)