Skip to content
badbots.news
Misbehavior1 sourceFirst seen
Picture from the hiddenlayer.com article
Image: hiddenlayer.com

Cursor's AI Took a README a Little Too Seriously and Started Mailing Out Your SSH Keys

Ourtake

Nothing says helpful setup guide like one that doubles as an exfiltration plan. Patched in 1.3.

What happened

HiddenLayer researchers showed that hidden instructions in a GitHub README could make Cursor's AI coding assistant bypass its command denylist and exfiltrate API keys and SSH keys. The vulnerabilities were disclosed to Cursor and patched in version 1.3.

Source