Cursor AI Extension Flaw Exposes Developer Tokens to Credential Theft

Gbhackers •Divya • April 29, 2026

Security researchers at LayerX have uncovered a high-severity vulnerability in the popular AI-powered development environment, Cursor. Dubbed “CursorJacking,” this flaw carries a CVSS score of 8.2 and exposes developers to immediate credential theft. Any installed extension can silently access a user’s API keys and session tokens without requiring special permissions or user interaction. Standard security […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cursor Vulnerability Allows API Key Theft via Rogue Extensions A high-severity vulnerability in the Cursor AI development tool enables any installed extension to access sensitive API keys and session tokens without user interaction. Discovered by LayerX, this flaw has a CVSS score of 8.2 and stems from Cursor's use of an unprotected local SQLite database for storing credentials. As a result, any extension, regardless of permissions, can directly query this database, leading to potential credential theft and unauthorized access to third-party services. LayerX reported the issue to Cursor, which acknowledged it but stated that users must define their own trust boundaries. As of April 28, 2026, the vulnerability remains unpatched, posing significant risks to developers using Cursor. Malicious extensions can be disguised as harmless tools, making detection challenging. The implications extend beyond Cursor, potentially affecting services like OpenAI and Google. 3 sources 69

Extracted Entities

Cursor AI Extension Flaw Exposes Developer Tokens to Credential Theft

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

Vulnerabilities (1)