Cursor Extension Flaw Exposes Developer API Keys
2026-04-29
Infosecurity Magazine
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Multiple high-severity vulnerabilities in the Cursor AI-powered coding environment allow attackers to execute arbitrary code on developers' machines and access sensitive credentials, including API keys and session tokens. These flaws highlight significant security risks in AI-assisted development workflows, with some issues remaining unresolved as of April 2026.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves an AI system (Cursor, an AI-powered development tool) whose design and use have directly led to a security vulnerability that exposes sensitive credentials. This exposure constitutes harm to property and potentially to communities by enabling unauthorized access to third-party AI platforms and developer environments. The vulnerability is actively exploitable and has resulted in realized harm through credential compromise, meeting the criteria for an AI Incident. The involvement of AI in the tool and the direct link to harm from the flaw justifies classification as an AI Incident rather than a hazard or complementary information.[AI generated]