The Cursor Allowlist Bypass That Starts With a File Named curl

Last week I shipped CVE-2026-22708 coverage to secops-toolkit-mcp, my toolkit of defensive SecOps...