Cursor vulnerability disclosed publicly after vendor unresponsiveness

A researcher went public with a security flaw in Cursor, the AI code editor, after the maintainers didn't respond to responsible disclosure attempts. Full disclosure as a last resort highlights the friction when indie tools lack formal security processes—a real problem as more developers rely on AI-assisted coding.