Critical Vulnerability Disclosed in Cursor AI Code Editor
The flaw, reported on September 12, 2025, could allow an attacker to trigger silent, arbitrary code execution on a developer's machine.
A Supply Chain Risk
A critical vulnerability in Cursor, a popular AI-powered code editor, was disclosed on September 12, 2025. The flaw could allow an attacker to trigger silent, arbitrary code execution on a developer's machine simply by having the developer open a malicious repository. The disclosure highlights the growing security risks embedded in the AI development toolchain.
According to a report from The Hacker News and a corresponding CVE entry, the issue stemmed from insufficient sanitization of repository content. This vulnerability turned a routine development task into a potential attack vector.
How the Exploit Works
The vulnerability …
Archive Access
This article is older than 24 hours. Create a free account to access our 7-day archive.