Cursor security vulnerability 1 SpaceX Owns Cursor Now, and It Still Has an Unpatched Security Hole Aug 19, 2026