'CursorJack’ Attack Path Exposes Code Execution Risk in AI Development Environment

Proofpoint researchers disclosed "CursorJack", a vulnerability in the Cursor IDE that abuses MCP deeplinks to embed malicious configuration and enable local code execution or installation of remote malicious components if a user clicks a crafted link and approves an installation prompt; exploitation requires user interaction, no zero-click exploit was observed, a PoC was published and Cursor was notified.