Cursor "Open-Folder" Autorun Vulnerability
Date: 2025-09
Affected: Cursor "Open-Folder" Autorun Vulnerability
Attack vector: other
Category: real-world
Severity: Medium

Cursor ships with Workspace Trust disabled by default. A malicious `.vscode/tasks.json` with `runOn: "folderOpen"` auto-executes code the moment a developer opens a project folder -- no trust prompt, no consent. A booby-trapped repo can steal cloud keys, PATs, API tokens, and pivot to CI/CD.


Mitigations:

Architectural layers (MAESTRO):