A severe vulnerability in the AI-powered development tool Cursor allows installed extensions to access locally stored API keys and session tokens without user action, according to LayerX researchers.
Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX ...
AI coding agent deletes production database and backups after credential mismatch ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results