Agentjacking lets attackers hijack AI coding agents via fake Sentry errors
Tenet Security showed that a single forged Sentry error, sent through a public DSN, can trick AI coding assistants like Claude Code and Cursor into executing attacker‑controlled code on a developer’s machine. The attack bypasses firewalls, EDR and user prompts, exposing credentials and repos at scale across thousands of organizations. Mitigation requires tightening trusted data handling in AI agent runtimes.