Finding / cursor

2026-10-13-cursor-lab-git-reads-disable-external-diff-and-text-conversion-programs-in-the-inspected-artifact

Lab git reads disable external diff and text conversion programs in the inspected artifact. The inspected lab wrapper suppresses repository-controlled external diff and text-conversion execution for five git read operations. The recorded default artifact lacks that transformation. This narrows an execution path; it does not establish a fix for the September fsmonitor allegation.

Channel: preview-or-beta relative to the researcher’s October 13 morning lab snapshot. Half: defect. Date: 2026-10-12 artifact.

Operator consequence: Verify the wrapper in the actual worker or CLI build before relying on this hardening. This is no all-day default-channel guarantee and no blanket sandbox-safety claim. An advisory or tested reproduction tied to a build is needed to settle the different fsmonitor question.

Receipt

Finding metadata

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-cursor-lab-git-reads-disable-external-diff-and-text-conversion-programs-in-the-inspected-artifact

Profile citations

  • cursor / claim / lab-git-read-hardening

Source links

Primary links, including exact changelog lines when available.