{"slug": "deepjack-one-click-on-a-cursor-deeplink-installs-an-mcp-backdoor", "title": "DeepJack: One Click on a Cursor Deeplink Installs an MCP Backdoor", "summary": "Adversa AI disclosed on July 15, 2026 a new attack called DeepJack that exploits a flaw in Cursor IDE's deeplink handler to silently install an attacker-controlled MCP server on a developer's machine with one click and one dialog approval. The attack bypasses Cursor's fix for the previous CVE-2025-54133 vulnerability and still works as of build 3.9.8.", "body_md": "Cursor IDE’s deeplink handler has a problem. A crafted cursor:// link — the kind used to install MCP servers — can silently deploy an attacker-controlled server on a developer’s machine with one click and one dialog approval. The attack, called DeepJack, was disclosed by Adversa AI on July 15, 2026. It bypasses Cursor’s own fix for the previous deeplink vulnerability. As of build 3.9.8, it still works. How DeepJack Works The predecessor attack, CursorJack (CVE-2025-54133), abused the cursor://anysphere.cursor-deeplink/mcp/install endpoint directly. Cursor patched it in version 1.3 by surfacing the full command in the install dialog — so users could at […]\n\nThe post", "url": "https://wpnews.pro/news/deepjack-one-click-on-a-cursor-deeplink-installs-an-mcp-backdoor", "canonical_source": "https://byteiota.com/deepjack-one-click-on-a-cursor-deeplink-installs-an-mcp-backdoor/", "published_at": "2026-08-02 00:08:05+00:00", "updated_at": "2026-08-02 00:23:16.362342+00:00", "lang": "en", "topics": ["ai-tools", "ai-safety", "ai-policy"], "entities": ["Adversa AI", "Cursor IDE", "CursorJack", "DeepJack", "CVE-2025-54133"], "alternates": {"html": "https://wpnews.pro/news/deepjack-one-click-on-a-cursor-deeplink-installs-an-mcp-backdoor", "markdown": "https://wpnews.pro/news/deepjack-one-click-on-a-cursor-deeplink-installs-an-mcp-backdoor.md", "text": "https://wpnews.pro/news/deepjack-one-click-on-a-cursor-deeplink-installs-an-mcp-backdoor.txt", "jsonld": "https://wpnews.pro/news/deepjack-one-click-on-a-cursor-deeplink-installs-an-mcp-backdoor.jsonld"}}