2025-08 · 2025-Q3
Cursor MCPoison Silent Backdoor
Layer tags: not yet tagged.
Target
Cursor AI IDE
Impact
Silent backdoor execution on every team member who opens a project
Root Cause
MCP server trust bound to name rather than content hash; no re-approval for config changes