{"vulnerability": "CVE-2026-50548", "sightings": [{"uuid": "fc4f588b-dafc-413e-b4d2-3680a491175a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5saapazc2a", "content": "CVE-2026-50548 - Cursor Desktop sandbox escape via agent-controlled working directory\nCVE ID : CVE-2026-50548\n \n Published : June 25, 2026, 6:47 p.m. | 6\u00a0hours, 23\u00a0minutes ago\n \n Description : Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs age...", "creation_timestamp": "2026-06-26T01:30:06.844638Z"}, {"uuid": "51389a47-63ce-47a1-8b98-a230fe164865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpbyqcckd52g", "content": "\ud83d\udccc CVE-2026-50548 - Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default, and the sandbox gran... https://www.cyberhub.blog/cves/CVE-2026-50548", "creation_timestamp": "2026-06-27T17:37:06.843828Z"}, {"uuid": "c6e64647-47c8-4b78-a989-e5a56e947cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpm2pf23vm2u", "content": "\ud83e\udd16 CVE-2026-50548/50549 (CVSS 9.8): Prompt injection in Cursor AI editor allows sandbox escape and arbitrary command execution via a crafted prompt. Dubbed \"DuneSlide\" by Cato AI Labs.\nhttps://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html", "creation_timestamp": "2026-07-01T17:39:00.830596Z"}, {"uuid": "92afac53-4c82-403c-82f4-a94fc502f3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html", "content": "Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore.\n\nCato AI Labs found the pair and named them DuneSlide. They are tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8 out of 10 (or 9.3", "creation_timestamp": "2026-07-01T19:00:56.233889Z"}, {"uuid": "905fd6cd-c14b-4297-ad02-01fa9387fee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html", "content": "Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore.\n\nCato AI Labs found the pair and named them DuneSlide. They are tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8 out of 10 (or 9.3", "creation_timestamp": "2026-07-02T01:00:45.709253Z"}]}