Developer Alert: “CursorJack” Technique Weaponizes Deeplinks to Hijack Cursor IDE

Proofpoint Threat Research disclosed 'CursorJack', a vulnerability in the Cursor AI code editor where manipulated cursor:// MCP deeplinks can be socially engineered to execute arbitrary OS commands or install malicious MCP servers on a developer's workstation; a single click plus consent may enable persistent compromise, exposing credentials, source code, and supply-chain risks, and Proof-of-Concept code has been published.