←Search results

Search “Microsoft”

By relevance · Total 62 results Clear search

Saturday

Wednesday

  1. Cato AI LabsSelected

    Aim Labs discloses Cursor MCP auto-start remote code execution vulnerability CurXecute

    Aim Labs discovered a high-severity vulnerability, CurXecute, in the Cursor IDE that can lead to full remote code execution, tracked as CVE-2025-54135, with a severity rating of 8.6. The attack path is: when Cursor connects to an MCP server that reads external content (such as Slack), a single poisoned prompt can induce the agent to rewrite ~/.cursor/mcp.json; Cursor then immediately executes newly added entries in that file and writes them to disk before the user confirms, thereby executing attacker commands with the user's privileges. Cursor has fixed this in version 1.3; earlier versions remain affected.

    Aim Labs discovered a high-severity vulnerability, CurXecute, in the Cursor IDE that can lead to full remote code execution, tracked as CVE-2025-54135, with a severity rating of 8.6. The attack path is: when Cursor connects to an MCP server that reads external content (such as Slack), a single poisoned prompt can induce the agent to rewrite /.cursor/mcp.json; Cursor then immediately executes newly added entries in that file and writes them to disk before the user confirms, thereby executing atta

    Matched fieldsBody

    #research#Safety / alignment#Agents#English text is being prepared.