Cursor AI Extension Access Developer Tokens Leads to Full Credential Compromise

Cybersecuritynews •Abinaya • April 30, 2026

A high-severity access-control vulnerability (CVSS 8.2) in Cursor, a widely used AI-powered coding environment. The flaw uncovered by LayerX has allowed any installed extension to access a developer’s API keys and session tokens secretly. This results in total credential compromise without triggering any alerts or requiring user interaction. Unlike secure applications that store sensitive secrets […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cursor Vulnerability Allows API Key Theft via Rogue Extensions A high-severity vulnerability in the Cursor AI development tool enables any installed extension to access sensitive API keys and session tokens without user interaction. Discovered by LayerX, this flaw has a CVSS score of 8.2 and stems from Cursor's use of an unprotected local SQLite database for storing credentials. As a result, any extension, regardless of permissions, can directly query this database, leading to potential credential theft and unauthorized access to third-party services. LayerX reported the issue to Cursor, which acknowledged it but stated that users must define their own trust boundaries. As of April 28, 2026, the vulnerability remains unpatched, posing significant risks to developers using Cursor. Malicious extensions can be disguised as harmless tools, making detection challenging. The implications extend beyond Cursor, potentially affecting services like OpenAI and Google. 3 sources 69

Extracted Entities

Cursor AI Extension Access Developer Tokens Leads to Full Credential Compromise

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)