Last seen September 12, 2025

AI Remote Code Execution Vulnerability

Evidence indicates that the affected technology is affected by remote code execution.

Technical Severity

Low severity

Lifecycle Status

STABLE

Sources

1 source: thehackernews.com

What Happened

Evidence indicates that the affected technology is affected by remote code execution.

Why This Matters

The evidence matters to defenders using Cursor AI Code because it could let an attacker run code in affected environments.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether Cursor AI Code is present in your environment and review the affected configuration.

Follow this incident as it develops Material-change notifications are being prepared for BugSkan Pro.

Exposure

Recommended Response

First Seen

Sep 12, 2025 05:30

Last Seen

Sep 12, 2025 05:30

Exploitation status: UNKNOWN

Primary entities:

Remote Code Execution Supply Chain

Timeline

Incident first seen
Sep 12, 2025 05:30
BugSkan first recorded this incident.
Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories - The Hacker News
Sep 12, 2025 05:30
thehackernews.com · Vulnerability

Sources

Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories - The Hacker News

thehackernews.com · Sep 12, 2025 05:30

A security flaw in the Cursor AI code editor, a Visual Studio Code fork, allows for silent arbitrary code execution when a maliciously crafted repository is opened. This vulnerability stems from "Workspace Trust" being disabled by default, enabling tasks configured in `.vscode/tasks.json` to auto-execute and posing a significant supply chain risk.

Open publisher source

Watchlist Match

Want personalized relevance?

Create an account to see which incidents overlap with the technologies you monitor.