Francisco Rosales is an Offensive Security Engineer specializing in application security across web, API, mobile, and AI-powered systems. He also builds AI-native tooling that bridges offensive security with modern AI workflows.
Articles
- Research
GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok
Sep 1, 2026
Francisco RosalesOffensive Security Engineer
- Research
Cursor CLI Ran Untrusted Repository Code With the Sandbox Switched Off
Aug 10, 2026- Francisco RosalesOffensive Security Engineer
- Research
Anyone with an account could run commands on PewDiePie's AI workspace (CVSS 9.9)
Jul 30, 2026- Francisco RosalesOffensive Security Engineer
- Research
The "Restricted" Deployment That Wasn't: Two Access-Control Bugs in community-built mcp-atlassian
Jul 27, 2026- Francisco RosalesOffensive Security Engineer
- Research
When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server
Jul 21, 2026- Francisco RosalesOffensive Security Engineer
- Research
CVE-2026-54052: A wrong number in n8n-mcp leaked your neighbor's credentials (CVSS 9.6)
Jun 4, 2026
Ax SharmaHead of Research- Francisco RosalesOffensive Security Engineer
- Research
When "Read-Only Mode" Isn't: CVE-2026-46519 in mcp-server-kubernetes
May 18, 2026- Ax SharmaHead of Research
- Francisco RosalesOffensive Security Engineer