TLDR Tech / InfoSec
Cursor AI Vulnerability Exposed Developer Devices
A NomShub attack chain discovered in Cursor AI exploits indirect prompt injection and a sandbox escape to overwrite .zshenv, enabling arbitrary code execution on macOS. Malicious repository READMEs can trick the AI agent into opening remote tunnels and authorizing an attacker's GitHub account for persistent shell access.
Read the full story