Discovered Feb 10, 2026; vendor reports Feb-Mar 2026; public disclosure July 8, 2026 after 90+ day window. Mitigations: resolve symlinks before prompts, warn on workspace exit, never write before authorization. AWS language server 1.69.0 May 27. Cursor v3.0 June 5. Google May 22.