https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 15:10:09 +0000 https://cve.radiocsirt.org/vuln/cve-2025-64106 <p><strong>Affected:</strong> cursor</p> <p>Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor&#39;s MCP server installation enables specially crafted deep-links to bypass the standard security warnings and conceal executed commands from users if they choose to accept the server. If an attacker is able to convince a victim to navigate to a malicious deeplink, the victim will not see the correct speedbump modal, and if they choose to accept, will execute commands specified by the attackers deeplink.</p> <p><strong>Affected:</strong> cursor</p> <p>Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor&#39;s MCP server installation enables specially crafted deep-links to bypass the standard security warnings and conceal executed commands from users if they choose to accept the server. If an attacker is able to convince a victim to navigate to a malicious deeplink, the victim will not see the correct speedbump modal, and if they choose to accept, will execute commands specified by the attackers deeplink.</p> https://cve.radiocsirt.org/vuln/cve-2025-64106