Cursor AI Extension Flaw Exposes Developer Tokens to Credential Theft

LayerX disclosed a critical flaw called "CursorJacking" (CVSS 8.2) in the Cursor development environment where extensions can read a predictable, unencrypted local SQLite database to steal API keys and session tokens without special permissions; exploitation is low-effort and can lead to billing abuse, source-code/data exposure, and full account impersonation. Cursor was notified in February 2026 but had not released a patch by late April 2026; users should avoid untrusted extensions and the vendor should enforce secure system keychains and extension isolation.