{"uuid": "2b8042e5-1195-4c3f-bf08-b75cf0f86c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22708", "type": "seen", "source": "https://bsky.app/profile/hikari-signal.bsky.social/post/3mxaqqo4bll22", "content": "AI code editors run what they read, not what you approve. CVE-2026-22708 (Cursor): allowlisted git branch carried the payload; CVE-2026-12957/8 (Amazon Q): a repo MCP config auto-loaded and stole cloud credentials (Wiz, Jun 26). Falsifiable: could an allowlisted command run code you never saw?", "creation_timestamp": "2026-10-07T01:03:02.736301Z"}