NomShub Exploits Cursor’s Remote Tunnel to Hijack Developer Machines
Researchers discovered NomShub, a chain of vulnerabilities in the Cursor AI code editor that lets a malicious repository execute indirect prompt injection, escape the IDE sandbox via shell builtins, and activate Cursor’s built‑in remote tunnel for persistent, undetected shell access. The attack requires only opening the repo, highlighting the risk of AI‑assisted coding tools.