Public Sentry DSNs Enable Agentjacking of Claude Code, Cursor, and Codex
Tenet Security discovered that anyone who uncovers a public Sentry DSN can submit a crafted error event that the AI coding agents treat as executable instructions, turning Claude Code, Cursor, or Codex into a remote code‑execution tool on a developer’s machine. The attack requires no malware or stolen credentials, only the publicly embedded DSN.