🎯 DeepJack

The items that name it 2

• The Cursor deeplink vulnerability that turns a “review this PR” click into remote code execution
  writeup2026-07-15It is written here as DeepJack (named by the page's authors).

  Vulnerability class for AI coding agents where OS-level URL/deeplink handlers allow install-or-execute actions with a confirmation dialog that fails to show the real command

• TrustFall: 1-click coding agent RCE in Claude, Cursor, Copilot
  writeup2026-05-07It is written here as DeepJack (cursor:// deeplink).

  Reaches Cursor's MCP install dialog via a cursor:// deeplink whose command scrolls out of the visible field before user approval