AISLE discloses 1-click RCE in Cursor, VS Code, and Google Antigravity, all now patched
stanislavfort · x · 2026-09-08
AISLE's AI vulnerability analyzer discovered a one-click remote command execution (RCE) vulnerability in Cursor, VS Code, and Google Antigravity—tools used by 50 million engineers. All three platforms have since been patched.
- The attack: malicious commands hidden in links inside commit messages; clicking one executed arbitrary code with full terminal privileges—no warning, no confirmation, no visible trace
- Impact: exfiltration of API keys and certificates (OpenAI, Anthropic, Stripe), persistent keyloggers broadcasting terminal input to external servers, file deletion
Disclosure timeline: found in VS Code and Cursor in Sep 2025 (Cursor fixed immediately); resurfaced in Google Antigravity after its Jan 2026 launch, fixed by Google within days; Microsoft later patched upstream VS Code. Full technical write-up on the AISLE blog.
More from coding & agent
- UCSB CS Prof. Xifeng Wang lands 3 grants worth $180K+ for practical agentic AI research — xwang_lk · 2026-10-27
- Gen games don't need to be realtime — turn-based interactivity works, devs argue — djcows · 2026-10-27
- Player rebuilds Street Fighter II in HD with Claude: $3,000 of tokens, 3 weeks — Fantastic-Jeweler781 · 2026-10-27
- How to ace the "send us something cool" AI interview: research interviewers with agents, then focus — brandon_galang · 2026-10-27
- Give AI a clean personal-data-free machine with full control: agents running 24/7 teach you more than any course — EXM7777 · 2026-10-27
- 20 papers across 6 areas to master production-grade agentic AI engineering — MaryamMiradi · 2026-10-27