Critical flaw in Cursor AI editor let attackers execute remote code via Slack and GitHub—fixed in v1.3 update.

The researchers found 12 vulnerabilities that can lead to both remote code execution and DoS in various components of the CODESYS protocol and another three that can result in just denial of service.