1-Click RCE Flaw in Cursor, VS Code, and Google Antigravity Exposes 50M Developers to Cyberattacks

AISLE discovered a critical one-click RCE in VS Code, Cursor, and Google Antigravity where a malicious link in a Git commit message could execute arbitrary code with full terminal privileges, enabling credential theft and persistent malware; all three editors have been patched and users are advised to update immediately and rotate potentially exposed API keys.