Rogue MCP Servers Exploit Vulnerability in Cursor Code Editor

Security researchers have identified a vulnerability in Cursor, an AI-powered code editor, that allows rogue Model Context Protocol (MCP) servers to inject malicious code into its internal browser. This exploit can replace legitimate login pages with attacker-controlled pages, compromising user security. The lack of integrity verification in Cursor's features makes it particularly susceptible to such attacks.