Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Cursor IDE MCP deeplink code execution security flaw

Vulnerability
First reported
Last updated
Happening score
H score 37
1 unique sources, 1 articles

Summary

Hide ▲

A Cursor IDE flaw in MCP deeplinks can let crafted installation links trigger arbitrary commands or install malicious components under some user-approval and configuration conditions. The issue, dubbed CursorJack, was shown in controlled testing as of January 19, 2026 and was not automatic. A single click on a crafted link followed by approval of an installation prompt may be enough in some environments. The pathway is especially risky for developers handling API keys, credentials, and source code.

Related Happenings

Cursor Windows repo-root git.exe code execution security flaw

Vulnerability
H score9 First: 15.07.2026 13:55 Last: 15.07.2026 13:55 Sources 1

About this happening: Cursor on Windows automatically runs a repo-root git.exe when a repository is opened, creating arbitrary code execution as the logged-in user. The flaw affects cloned...

Open Happening

AI coding assistants GhostApproval symlink security flaw

Vulnerability
H score22 First: 09.07.2026 07:27 Last: 09.07.2026 07:27 Sources 1

About this happening: A July 8 disclosure identified GhostApproval, a symlink flaw in six AI coding assistants that can redirect approved writes into ~/.ssh/authorized_keys or ~/....

Open Happening

Cursor local SQLite secret-storage exposing credentials security flaw

Vulnerability
H score34 First: 29.04.2026 18:00 Last: 29.04.2026 18:00 Sources 1

About this happening: A high-severity Cursor flaw lets installed extensions read secrets stored locally, exposing API keys and session tokens without user interaction. The weakness stem...

Open Happening

VSCode extensions local file theft and RCE vulnerabilities (multiple vulnerabilities)

Vulnerability
H score60 First: 17.02.2026 23:27 Last: 17.02.2026 23:27 Sources 1

About this happening: High-to-critical vulnerabilities in popular VSCode extensions can expose developers to local file theft and remote code execution across software downloaded more t...

Open Happening

Microsoft Copilot Reprompt prompt-injection security flaw

Vulnerability
H score0 First: 14.01.2026 16:00 Last: 14.01.2026 16:00 Sources 1

About this happening: Reprompt is a Microsoft Copilot prompt-injection flaw that can let a crafted URL trigger invisible data exfiltration from an authenticated session. The abuse path...

Open Happening

Timeline

  1. 17.03.2026 17:00 1 articles · 4mo ago

    Cursor IDE MCP deeplink testing reveals code-execution path

    Technical Analysis Update

    Controlled testing on January 19, 2026 showed that Cursor IDE's MCP deeplink handling could be abused by a crafted link that appears legitimate but carries harmful configuration data, and a click followed by installation-prompt approval may let the IDE execute commands with the user's privileges or install malicious components; no zero-click exploitation was observed.

    Show sources
    Open in new tab
  2. 17.03.2026 17:00 2 articles · 4mo ago

    Proofpoint discloses CursorJack and notifies Cursor

    Initial Disclosure

    On March 17, 2026, Proofpoint publicly disclosed CursorJack, published a proof-of-concept on GitHub, and notified Cursor through its vulnerability-reporting channel after describing the issue as a code-execution path in the Cursor IDE and recommending stronger built-in verification, permission controls, and installation transparency for MCP workflows.

    Show sources
    Open in new tab