Cursor JSON Schema Download Vulnerability Leading to Potential Information Exfiltration

A vulnerability in the Cursor code editor, prior to version 0.51.0, allowed for arbitrary HTTP GET requests to be sent without user confirmation. This was possible because the default setting for 'json.schemaDownload.enable' was True. The Cursor Agent's ability to edit JSON files could be exploited, especially after a successful prompt injection attack, to exfiltrate data from an agent-controlled URL.

Impact

Exploitation of this vulnerability could lead to unauthorized data exfiltration from the user's environment, particularly information accessible to the Cursor Agent.

Remediation

Users should update to Cursor version 0.51.0 or later, and ensure that the 'json.schemaDownload.enable' setting is disabled by default.