# agentjacking-public-sentry-dsn-hijacks-claude-code-cursor-codex-via-mcp: AgentJacking: Public Sentry DSN Hijacks Claude Code, Cursor & Codex via MCP

> AgentJacking: Public Sentry DSN Hijacks Claude Code, Cursor & Codex via MCP is a high-severity prompt injection issue in AI coding agents integrating a Sentry DSN / Sentry MCP, a MCP server. Affected: AI coding agents integrating a Sentry DSN / Sentry MCP (June 2026).

- **Canonical URL:** https://catalog.anomity.ai/vuln/agentjacking-public-sentry-dsn-hijacks-claude-code-cursor-codex-via-mcp
- **Aliases:** ti-035
- **Severity:** high
- **Attack type:** Prompt injection, Supply chain compromise
- **Component:** AI coding agents integrating a Sentry DSN / Sentry MCP (MCP server)
- **Catalog entry:** https://catalog.anomity.ai/agent/cursor
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-06-24
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/agentjacking-public-sentry-dsn-hijacks-claude-code-cursor-codex-via-mcp

## Summary

Tenet Security's Threat Labs documented "AgentJacking": a public Sentry DSN (logging key) left exposed in a project lets an attacker intercept and proxy the agent's Sentry/MCP traffic, modifying the AI agent's responses to inject malicious code or alter the instructions the developer sees. It affects AI coding agents wired to a Sentry DSN / Sentry MCP integration, Claude Code, Cursor, and Codex.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| AI coding agents integrating a Sentry DSN / Sentry MCP (June 2026) | no fixed version listed |

## Am I affected by this vulnerability?

You are affected if you run AI coding agents integrating a Sentry DSN / Sentry MCP (June 2026).

## How do I fix it?

Treat Sentry DSNs as secrets; never commit them or expose them in client-side or project config; rotate any exposed DSN. Lock the agent MCP server list to an approved allowlist and require explicit approval for new servers. Monitor agent network traffic for unexpected proxy/C2 endpoints.

## How do I find every machine running AI coding agents integrating a Sentry DSN / Sentry MCP?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run AI coding agents integrating a Sentry DSN / Sentry MCP and which version, then enforce a policy on it.

## References

- article: https://www.getreadyforagents.com/news/claude-code-cursor-codex-agentjacking-sentry-mcp/

## Related vulnerabilities

- [tensorlake-npm-sdk-0-5-144-compromised-by-a-shai-hulud-chaindrop-worm](https://catalog.anomity.ai/vuln/tensorlake-npm-sdk-0-5-144-compromised-by-a-shai-hulud-chaindrop-worm) — critical
- [trojanized-claude-code-extension-2-1-313-in-cursor-s-marketplace](https://catalog.anomity.ai/vuln/trojanized-claude-code-extension-2-1-313-in-cursor-s-marketplace) — critical
- [CVE-2025-54133](https://catalog.anomity.ai/vuln/cve-2025-54133) — high
- [CVE-2026-50548](https://catalog.anomity.ai/vuln/cve-2026-50548) — critical
- [symantec-the-aoki-infostealer-now-takes-claude-codex-cursor-copilot](https://catalog.anomity.ai/vuln/symantec-the-aoki-infostealer-now-takes-claude-codex-cursor-copilot) — high
- [ghostapproval-symlink-bypass-hits-claude-code-cursor-windsurf](https://catalog.anomity.ai/vuln/ghostapproval-symlink-bypass-hits-claude-code-cursor-windsurf) — high

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=agentjacking-public-sentry-dsn-hijacks-claude-code-cursor-codex-via-mcp