TLDR Tech / InfoSec
NomShub: Weaponizing Cursor's Remote Tunnel Through Indirect Prompt Injection and Sandbox Breakout
Researchers uncovered a now-patched vulnerability in Cursor that could allow an attacker to execute code on a victim's system with no user interaction beyond opening the repository in Cursor. The vulnerability exploits a sandbox breakout caused by Cursor's shouldBlockShellCommand parser failing to block shell built-ins such as export, cd, and echo. Attackers can exploit this to hijack Cursor's cursor-tunnel binary, which uses Microsoft's Dev Tunnels infrastructure to obtain unauthenticated shell access.
Read the full story