2-Click Cursor Exploit Enables Dev Environment Takeover

Adversa AI disclosed "DeepJack," a high-impact two-click attack against Cursor IDE (vulnerable 3.9.8) that abuses double-encoded deeplinks and a deceptive single-line confirmation dialog to silently install a malicious Model Context Protocol (MCP) server running with full user privileges. The report details attacker capabilities (access to repos, credentials, persistent backdoors, lateral movement), notes multiple related Cursor vulnerabilities disclosed in July 2026, lists patch status, and offers mitigation guidance (inspect deeplinks, audit MCP servers, allowlist, behavioral monitoring).