CVE-2026-35603: Cursor Still Trusts a World-Writable Folder

TL;DR Claude Code, Cursor, Codex CLI and Gemini CLI on Windows all load machine-wide...