Security crisis, supply-chain attacks, authorization exposure, and audit gaps

CVE-2026-101883 adds a Windows Node SSRF issue in canvas.present, alongside the separate CVE-2026-62201 sandbox exec-server SSRF reportedly fixed in 2026.6.6 and a narrowly scoped secret-egress-proxy issue. ClawJacked, reportedly fixed in 2026.2.25, reinforces risks from local gateway trust assumptions; Trail of Bits findings and an estimate of 1,184 malicious skills add to supply-chain concerns, while claims of 135,000 exposed instances and 17% inadequate defenses remain unverified. Alter Vault proposes scoped connections and requester-linked approvals, but its protections cover only plugin-mediated calls; keep approvals out of agent reach and scrutinize browser and host authority.