Critical Cursor AI Code Editor Flaws Could Lead to OS-Level Remote Code Execution

The DuneSlide vulnerabilities in the Cursor AI code editor allow for zero-click prompt injection attacks. These attacks can escape the editor's sandbox and execute arbitrary code on the underlying operating system, potentially leading to remote code execution. The vulnerabilities pose a significant risk as they can be exploited without any user interaction. This could enable attackers to gain control of the operating system. The vulnerabilities are referred to as DuneSlide. They can lead to OS-level remote code execution.