A security flaw in the Cursor AI code editor, a Visual Studio Code fork, allows for silent arbitrary code execution when a maliciously crafted repository is opened. This vulnerability stems from "Workspace Trust" being disabled by default, enabling tasks configured in `.vscode/tasks.json` to auto-execute and posing a significant supply chain risk.
Why This Matters
The evidence matters to defenders using the affected technology because it could let an attacker run code in affected environments.
Recommended Action
Confirm whether Malicious Repositories is present in your environment and review vendor guidance for this report. Apply available patches or mitigations if your deployment matches the described conditions.
Affected
Cursor AI code editorRemote Code ExecutionSupply ChainCursor AI CodeEditor Flaw EnablesMalicious Repositories