Cursor Remote Code Execution Vulnerability via Visual Studio Code Workspaces

A remote code execution vulnerability exists in Cursor versions through 1.6, allowing attackers to manipulate Visual Studio Code workspace files. When a workspace is opened, VS Code creates an untitled workspace file that includes all folders and settings from the current session. If an attacker can hijack the chat context of a user, they may exploit prompt injection to alter the workspace file, bypassing existing security measures and potentially executing arbitrary code on the victim's machine.

Impact

Exploitation of this vulnerability could lead to remote code execution on the victim's machine, without requiring user approval.

Remediation

Users can update to Cursor version 1.7 or later, where this vulnerability has been addressed.