Researchers reported the vulnerability to Cursor in December, but it still remains in the popular AI coding platform and can be exploited in poisoned repository attacks.
Cursor IDE Auto-Executes Malicious Code in Poisoned Repos
Summary + source link. No paywalls, no tracking.