Cursor Autorun Flaw Lets Repositories Execute Code Without Consent

A newly disclosed vulnerability in the Cursor VS Code extension's "autorun" feature can execute hidden commands automatically when a repository folder is opened, potentially allowing attackers to steal tokens/API keys, alter files, or plant persistent malware. Oasis Security researchers published the finding and industry experts warn this increases software supply-chain risk—especially since Workspace Trust is disabled by default in Cursor—while noting Cursor has been targeted previously.