Today we're talking about another (???) issue in the Cursor AI IDE.
Uncategorized
1
Posts
1
Posters
0
Views
-
Today we're talking about another (???) issue in the Cursor AI IDE. Well actually it's two issues, one of which is simple command injection; the other is takeover via Dev tunnels. Don't know what dev tunnels are? Come find out—then block them with extreme prejudice.
Cursor's Remote Tunnel capability is vulnerable to malicious prompt injection
The AI security firm Straiker has demonstrated a vulnerability in Cursor 2.x that allows a malicious prompt injection that has the potential to escape the sandbox provided by Cursor and take over the developer machine. T…
IFIN (discourse.ifin.network)
-
M mttaggart@infosec.exchange shared this topic