●builderUpdate Cursor immediately if not already patched; this attack chain — prompt injection to sandbox escape to tunnel hijack — is a template to audit in any AI coding tool that executes shell commands.
●policyThe exploit demonstrates that AI coding assistants with shell access create novel prompt-injection-to-RCE attack surfaces that existing sandboxing guidance doesn't fully address.