Unverified50% confidenceCautionExact time
An attacker only needs read/write access to the agent socket file on the remote host to send arbitrary signing requests to the local agent, which is especially easy for malicious users with root privileges or on shared hosts
1
Sources
50%
Confidence
Long-term
Relevance
9/23/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe method for obtaining this system's software requires users to 'one-click triple' and 'comment 666' before receiving the channel address via direct message, relying on private-domain guided distribution.71% similarUnverifiedThe exposure of username-to-email address mappings can be used for cross-platform credential stuffing attacks, particularly against users who reuse the same password.70% similarUnverifiedThe tool intercepts requests before they are sent to Cursor's servers and rewrites the Authorization identity information in the request header with the current account's token68% similarUnverifiedDesktop software of unknown origin may locally intercept cookies or tokens and upload them to a server to bypass OAuth restrictions, or require QR code login or account credential input, which is equivalent to surrendering credentials.68% similarVerified间接提示注入可将恶意指令藏入外部数据源（如网页、文档），待代理读取时自动触发攻击67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/945314API
curl https://kongchang.com/api/v1/knowledge/claims/945314MCP
get_claim(id=945314)