Unverified80% confidenceFactTime unknown
安全研究领域将通过Electron应用开发者工具执行代码的攻击方式称为'本地特权提升'（Local Privilege Escalation）
1
Sources
80%
Confidence
Long-term
Relevance
6/1/2026
First Seen
Sources
Cursor通过MCP免费调用Claude 4.7模型教程及安全风险分析
bilibili长青来了奥
Related Entities
Related Claims
UnverifiedSecurity researchers disclosed a local privilege escalation (LPE) vulnerability in MSI Center that allows a local attacker with ordinary privileges to escalate to Windows SYSTEM level within seconds.67% similarUnverifiedThe core security risks of computer use capability include prompt injection attacks and unauthorized access to sensitive local data.66% similarUnverifiedDuring installation, the Kuaima client needs to modify system network configurations and Cursor's internal files, and such behavior is easily flagged as malicious by the active defense mechanisms of security software66% similarUnverifiedUsing local proxy tools to take over AI IDE traffic carries security risks including plaintext storage and leakage of API keys, code data privacy being logged and uploaded, and man-in-the-middle attacks65% similarUnverifiedAnthropic's cybersecurity safeguards target scenarios involving the prevention of models being misused to generate malicious code, plan attack vectors, or assist in launching cyberattacks against critical infrastructure.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/16582API
curl https://kongchang.com/api/v1/knowledge/claims/16582MCP
get_claim(id=16582)