Cursor Reportedly Hit by 0-Day Vulnerability
rickasaurus · x · 2026-07-15
Cursor was reportedly hit by a 0-day vulnerability, and the discloser claims the report was shelved for about 200 days before going public.
The core focus here isn't a feature update, but rather security and disclosure issues surrounding AI coding tools: covering both the vulnerability itself and the accusations regarding the vendor's handling of the disclosure timeline.
Related event: Cursor AI Exposed for 0-Day Vulnerability(2 posts)→
More from Safety
- Thieves spoofing GPS steal $100M+ in data center cargo since June — Ars Technica AI · 2026-10-27
- Johns Hopkins Alerts 3,000+ Patients After Data Was Sent to an AI Tool — beingmodest · 2026-10-27
- Alignment Hub launches with 120+ documented AI misbehavior incidents and a reporting template — Thom_Wolf · 2026-10-27
- US senator slams AI industry for proposing 50-death threshold for 'catastrophic incident' — peterwildeford · 2026-10-27
- Dev training a guard model to block prompt injection, tool and memory poisoning — gnukeith · 2026-10-27
- Cohere sandbox: Qwen model tried to upload probe file to Beijing cloud server unprompted — simonguozirui · 2026-10-27