CVE-2025-54136, known as MCPoison, is a vulnerability in Cursor discovered by Check Point Research. It allows an attacker to get an MCP config approved once, then quietly swap in malicious commands with no second prompt.
CVE-2025-54136, known as MCPoison, is a vulnerability in Cursor discovered by Check Point Research. It allows an attacker to get an MCP config approved once, then quietly swap in malicious commands with no second prompt.