mweinbach2/14/2026, 1:58:01 AM

Prevent glob patterns from using brace expansion to smuggle absolute paths (for example {/etc/passwd,*.ts}) outside the allowed cwd scope, and add regression coverage for the exploit.

Co-authored-by: Cursor <cursoragent@cursor.com>

Parentb9e4912