2025-08 · 2025-Q3
Cursor CurXecute RCE via Slack MCP
Layer tags: not yet tagged.
Target
Cursor AI IDE
Impact
Full developer machine compromise from a single crafted Slack message; attack completes in minutes
Root Cause
AI processed crafted Slack messages as instructions; config changes executed before user approval