Disclosure timeline:
1. VS Code + Cursor: found in Sep 2025
2. Cursor: fixed immediately
3. Antigravity: found after launch in Jan 2026, fixed by Google in ~days
4. Microsoft: later patched upstream VS Code
Full technical write-up on the AISLE blog:
aisle.com/blog/aisle-d...
aisle.com
A 1-Click RCE Issue in Cursor, VS Code, and Antigravity
Learn how our AI found a one-click RCE vulnerability in 3 code editors: Cursor, VS Code, and Google Antigravity.