Advisoriesby IbisCursorGHSA-r22h-5wp2-2wfv
MCP Install Deeplink Did Not Show Arguments on User-Dialog
Fix: upgrade to 1.3 or later
Summary
A UI information disclosure vulnerability in Cursor's MCP (Model Context Protocol) deeplink handler allows attackers to execute 2-click arbitrary system commands through social engineering attacks. When users click malicious cursor://anysphere.cursor-deeplink/mcp/install links, the installation dialog does not show the arguments being passed to the command being run.
Impact
If a user clicks a malicious deeplink, then examines the installation dialog (which did not show the arguments, but does show the command itself) and clicks through, the full command including the arguments will be executed on the machine.
Remediation
Displayed arguments in installation dialog.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Cursor Product | < 1.3 | 1.3 |
Details and references
- Severity from
- GitHub (reviewed advisory)