Cursor versions prior to 1.3.9 contain an improper authorization flaw that permits attackers to execute arbitrary code on a victim machine without user approval.

This vulnerability, classified as improper authorization (CWE-285), allows an attacker to write files into a workspace without user consent. By chaining this with indirect prompt injection, an attacker can manipulate sensitive configuration files such as .vscode/settings.json to achieve remote code execution.

The ability to achieve remote code execution poses a severe risk to organizational security, as it grants attackers full control over the affected development environment. With a CVSS score of 7.5, this vulnerability could lead to the theft of intellectual property, credential harvesting, or the lateral movement of threats within the corporate network.

Immediate Action: Update the Cursor editor to version 1.3.9 or later immediately to incorporate the necessary authorization checks.

Proactive Monitoring: Monitor developer workstations for unusual file system modifications, particularly the creation or modification of hidden configuration files in workspace directories.

Compensating Controls: Ensure that developers execute untrusted code or projects within isolated environments or containers to minimize the impact of potential RCE attempts.

Public Exploit Available: Unknown

Given the high impact of remote code execution, organizations using Cursor should prioritize patching this vulnerability across all development endpoints. Promptly updating to version 1.3.9 is the only definitive method to eliminate the authorization bypass and prevent attackers from weaponizing workspace configurations.