Cursor 0-day vulnerability disclosed publicly after vendor fails to respond

Security researchers at Mindgard have publicly disclosed a zero-day vulnerability in the Cursor code editor, arguing that full disclosure was the only remaining way to protect users. The decision to go public came after the vendor failed to respond to the vulnerability report. Technical details of the attack have been published on the Mindgard blog.