AISLE discloses 1-click RCE in Cursor, VS Code, and Google Antigravity, all now patched
stanislavfort · x · 2026-09-08
AISLE's AI vulnerability analyzer discovered a one-click remote command execution (RCE) vulnerability in Cursor, VS Code, and Google Antigravity—tools used by 50 million engineers. All three platforms have since been patched.
- The attack: malicious commands hidden in links inside commit messages; clicking one executed arbitrary code with full terminal privileges—no warning, no confirmation, no visible trace
- Impact: exfiltration of API keys and certificates (OpenAI, Anthropic, Stripe), persistent keyloggers broadcasting terminal input to external servers, file deletion
Disclosure timeline: found in VS Code and Cursor in Sep 2025 (Cursor fixed immediately); resurfaced in Google Antigravity after its Jan 2026 launch, fixed by Google within days; Microsoft later patched upstream VS Code. Full technical write-up on the AISLE blog.
More from coding & agent
- Claude Projects now lets you drag threads into the message box or @ mention them for precise context — dfeinition · 2026-10-27
- Fern 0.1: a 0.1–0.5T coding model one researcher pretrained in 3.5 months for under $10M — teortaxesTex · 2026-10-27
- Jane Street's Yinsky shares tips for making codebases agent-friendly: types, property tests, formal methods — sh_reya · 2026-10-27
- Celesto launches CI runners nearly 90% cheaper than GitHub Actions, with agent sandboxes — aniketmaurya · 2026-10-27
- Runway launches App Studio: build no-code creative apps that generate image, video and audio — runwayml · 2026-10-27
- Supabase founders on rebuilding the backend for a billion AI-built apps — Latent Space · 2026-10-27