A significant security vulnerability affecting all IDEs based on Visual Studio Code has been highlighted, where opening a malicious directory can lead to exploitation. Despite awareness, Cursor has not addressed this issue, leaving users at risk. The vulnerability requires users to confirm a Trusted Workspace, which, if accepted, can result in compromise. SEAL Intel reports that this flaw is actively being exploited in the wild, with suspicions of involvement by North Korean hackers. Users are advised to exercise caution and avoid opening untrusted directories.