Cursor Deep-Link Vulnerability in MCP Server Bypasses Security Warnings and Executes Commands

A vulnerability in Cursor code editor's MCP server installation process allows specially crafted deep-links to bypass standard security warnings and obscure executed commands from users. This issue affects Cursor versions through 1.7.28. When a victim is convinced to click a malicious deep-link, they do not receive the appropriate security alert and, if they accept the installation, unwittingly execute commands specified by the attacker.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the victim's machine, without their knowledge or consent.

Remediation

Users can update to Cursor version 2.0, where this vulnerability has been addressed.