SquareX discovered hidden MCP API in Comet browser enabling arbitrary local command execution Vulnerability in Agentic ...