A zero-day vulnerability has been discovered in Cursor, prompting researchers to resort to full public disclosure. This drastic measure was taken to force action on a critical security flaw that the vendor has shown no interest in fixing.