diff --git a/crates/openshell-driver-mxc/tests/wxc_exec_real.rs b/crates/openshell-driver-mxc/tests/wxc_exec_real.rs
index d54a9b8cb6..71a983d300 100644
--- a/crates/openshell-driver-mxc/tests/wxc_exec_real.rs
+++ b/crates/openshell-driver-mxc/tests/wxc_exec_real.rs
@@ -1036,7 +1036,10 @@ async fn pc_https_egress_reads_injected_ca_bundle() {
                     access: "read-only".to_string(),
                     ..Default::default()
                 }],
-                binaries: vec![NetworkBinary { path: cmd_string }],
+                // The proxy authorizes the socket owner, not its cmd.exe parent.
+                binaries: vec![NetworkBinary {
+                    path: curl.to_string_lossy().into_owned(),
+                }],
             },
         )]),
         ..Default::default()