Rogue MCP Servers Exploit Vulnerability in Cursor's Internal Browser

Hackers are exploiting a critical vulnerability in Cursor, an AI-powered code editor, by using compromised Model Context Protocol (MCP) servers to inject malicious code. This attack allows the rogue servers to manipulate Cursor's internal browser, potentially replacing legitimate login pages with attacker-controlled ones. The lack of integrity verification in Cursor's proprietary features makes it particularly susceptible to these attacks.