VIBE CODING TOOL CURSOR'S MCP IMPLEMENTATION ALLOWS PERSISTENT CODE EXECUTION

Summary from the TLDR InfoSec newsletter

Check Point researchers uncovered a new remote code execution vulnerability in Cursor. The vulnerability, dubbed MCPoison, is caused by Cursor allowing an MCP configuration that has been previously approved to be updated without requiring a new approval. In this attack, an attacker could introduce a benign MCP and then, once it's approved, modify it to perform RCE or other malicious activity.