DeepJack: a 1-click deeplink RCE in Cursor via a lying MCP-install dialog15 July 2026·2 minsSecurity Research DeepJack RCE MCP Cursor Coding Agents
SymJack: the approval prompt is lying to you. A symlink-hijack RCE in five AI coding agents26 May 2026·2 minsSecurity Research SymJack RCE MCP Cursor Coding Agents
TrustFall: Coding Agent Security Flaw Enables One-Click RCE7 May 2026·2 minsSecurity Research TrustFall RCE MCP Cursor Coding Agents