Medium · published August 1, 2025
⚠️ A simple click could unleash a sneaky command! In versions 1.17 through 1.2 of Cursor, user-friendly deeplinks can lead to executing arbitrary system commands without showing the full story. 🔍 Think of this vulnerability like a restaurant menu without the prices listed; you order a dish, but you might end up getting an expensive surprise without knowing it! Your trust is exploited when you think you’re just clicking a harmless link. If an unsuspecting user clicks on a malicious `cursor://` link, they could unknowingly execute commands on their system, granting attackers an opportunity to run unwanted processes. While it’s not widespread yet, letting this go unchecked could create a pathway for malicious actors to control user systems.
Think of this vulnerability like a restaurant menu without the prices listed; you order a dish, but you might end up getting an expensive surprise without knowing it! Your trust is exploited when you think you’re just clicking a harmless link. This vulnerability lies in the Cursor MCP deeplink handler, which fails to display command arguments in the installation dialog. This oversight allows attackers to execute arbitrary commands by misleading users into clicking a link.
If an unsuspecting user clicks on a malicious `cursor://` link, they could unknowingly execute commands on their system, granting attackers an opportunity to run unwanted processes. While it’s not widespread yet, letting this go unchecked could create a pathway for malicious actors to control user systems. To protect yourself, upgrade to Cursor version 1.3 immediately. Educate your team on the risks of clicking on unknown links and consider implementing processes for verifying deeplink sources. 🛡️ You've got this! Stay vigilant and keep your systems safe with that new upgrade! 🚀