Post

Cursor might be leaking your credentials. Now in this the scenario. You are able to access the .env file in the chat. So logically this is also sent cursor to OpenAI / Claude / Gemni via their API. Even though the code is not stored on Cursor, it is stored for 30 days on OpenAI and Claude.