Security researchers have discovered a vulnerability dubbed "CursorJacking" affecting the Cursor code editor. This vulnerability allows malicious browser extensions to access a user's SQLite database, which may contain sensitive API keys. The issue highlights the potential risks associated with granting extensive permissions to browser extensions, especially when they interact with local data stores. AI
Summary written by gemini-2.5-flash-lite from 1 source. How we write summaries →
IMPACT Highlights security risks in developer tools that integrate AI features, potentially exposing sensitive credentials.
RANK_REASON Security vulnerability discovered in a specific software tool.