Critical Cursor AI Code Editor Flaws Could Let Prompt Injection Escape the Sandbox and Run Commands

Two vulnerabilities in Cursor could allow a single ordinary-looking prompt to escape the editor’s security sandbox and run commands on a developer’s computer. The attack requires neither a user click nor an approval. There was no indication that the flaws had been used in real attacks at the time of publication.