The vulnerability is an OS command injection that arises when the model processes malicious instructions presented on a visited website. By bypassing the command whitelist, the system may unknowingly execute those instructions, resulting in arbitrary code execution. The impact includes potential confidentiality, integrity, and availability compromise for the user’s environment.

Cursor’s code editor is affected for all releases prior to version 2.0. Users running the product before the 2.0 update are susceptible to this flaw.

The CVSS score of 8.7 indicates high severity, while an EPSS score of less than 1 % suggests a low likelihood of current exploitation. It is not listed in the CISA KEV catalog. The likely attack vector is a maliciously crafted web page that a user infects the editor with while it is running, combined with a whitelist bypass that the editor inadvertently permits.