Critical Vulnerability in Cursor AI Code Editor Enables Automatic Code Execution
Date: 2026-07-14
Attack vector: prompt-injection
Category: real-world
Severity: Critical

Tracked by the OECD AI Incidents and Hazards Monitor (AIM) as OECD-AIM-2026-07-14-d911, dated 2026-07-14. Classified attack vector: prompt-injection. See the AIM incident page (https://oecd.ai/en/incidents/2026-07-14-d911) and its cited news sources for full narrative detail.


Mitigations:

Architectural layers (MAESTRO):