A critical security vulnerability has been flagged in popular code editors and IDE platforms. Opening a project folder—seemingly a basic operation—can inadvertently trigger system command execution on both Windows and macOS environments. This poses a serious risk to developers working with Vibe Coding setups and mainstream development tools. Users of Cursor are especially vulnerable to this exploit. The attack surface is particularly dangerous because it requires minimal user interaction; simply accessing a folder can compromise system integrity. Developers should exercise extreme caution when loading unfamiliar or untrusted projects. Consider isolating development environments or using sandboxed solutions until patches are released. Stay vigilant about IDE updates and security bulletins from your tool vendors.