Last seen March 24, 2026

AI Remote Code Execution Vulnerability

Novee has introduced an AI Red Teaming platform to proactively identify security vulnerabilities in LLM-powered applications. Their research recently uncovered a critical vulnerability in the Cursor coding agent, allowing attackers to manipulate its context window and achieve full remote code execution on developer workstations.

Technical Severity
Low severity
Lifecycle Status

STABLE

What Happened

Novee has introduced an AI Red Teaming platform to proactively identify security vulnerabilities in LLM-powered applications. Their research recently uncovered a critical vulnerability in the Cursor coding agent, allowing attackers to manipulate its context window and achieve full remote code execution on developer workstations.

Why This Matters

The evidence matters to defenders using the affected technology because it could let an attacker run code in affected environments.

Recommended Action

Confirm whether LLM is present in your environment and review vendor guidance for this report. Apply available patches or mitigations if your deployment matches the described conditions.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

Mar 24, 2026 05:30

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: UNKNOWN

Primary entities:

CursorLLM-powered applicationscoding agentAI AgentsRemote Code ExecutionNovee

Timeline

  • Incident first seen
    Mar 24, 2026 05:30

    BugSkan first recorded this incident.

  • Novee introduces autonomous AI red teaming to hunt LLM vulnerabilities - Help Net Security
    Mar 24, 2026 05:30

    helpnetsecurity.com · Vulnerability

Sources

Novee introduces autonomous AI red teaming to hunt LLM vulnerabilities - Help Net Security

helpnetsecurity.com · Mar 24, 2026 05:30

Novee has introduced an AI Red Teaming platform to proactively identify security vulnerabilities in LLM-powered applications. Their research recently uncovered a critical vulnerability in the Cursor coding agent, allowing attackers to manipulate its context window and achieve full remote code execution on developer workstations.

Open publisher source

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

← Back to incident intelligence