{"vulnerability": "cve-2026-50548", "sightings": [{"uuid": "fc4f588b-dafc-413e-b4d2-3680a491175a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5saapazc2a", "content": "CVE-2026-50548 - Cursor Desktop sandbox escape via agent-controlled working directory\nCVE ID : CVE-2026-50548\n \n Published : June 25, 2026, 6:47 p.m. | 6\u00a0hours, 23\u00a0minutes ago\n \n Description : Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs age...", "creation_timestamp": "2026-06-26T01:30:06.844638Z"}, {"uuid": "51389a47-63ce-47a1-8b98-a230fe164865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpbyqcckd52g", "content": "\ud83d\udccc CVE-2026-50548 - Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default, and the sandbox gran... https://www.cyberhub.blog/cves/CVE-2026-50548", "creation_timestamp": "2026-06-27T17:37:06.843828Z"}, {"uuid": "c6e64647-47c8-4b78-a989-e5a56e947cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpm2pf23vm2u", "content": "\ud83e\udd16 CVE-2026-50548/50549 (CVSS 9.8): Prompt injection in Cursor AI editor allows sandbox escape and arbitrary command execution via a crafted prompt. Dubbed \"DuneSlide\" by Cato AI Labs.\nhttps://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html", "creation_timestamp": "2026-07-01T17:39:00.830596Z"}, {"uuid": "92afac53-4c82-403c-82f4-a94fc502f3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html", "content": "Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore.\n\nCato AI Labs found the pair and named them DuneSlide. They are tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8 out of 10 (or 9.3", "creation_timestamp": "2026-07-01T19:00:56.233889Z"}, {"uuid": "905fd6cd-c14b-4297-ad02-01fa9387fee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html", "content": "Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore.\n\nCato AI Labs found the pair and named them DuneSlide. They are tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8 out of 10 (or 9.3", "creation_timestamp": "2026-07-02T01:00:45.709253Z"}, {"uuid": "a13308e6-d3e5-48a4-b0e6-94cbef24c277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mpq5twsw3725", "content": "Cursor's AI agent had a sandbox. Two flaws (DuneSlide, CVSS 9.8) let a poisoned MCP server or web result overwrite it and run code.\n\nNo login, no click.\n\nFixed in Cursor 3.0. (CVE-2026-50548/50549)", "creation_timestamp": "2026-07-03T08:45:54.459771Z"}, {"uuid": "c267207e-056a-474a-bc50-eb259c918cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116855225036326256", "content": "DuneSlide (CVE-2026-50548/50549): CRITICAL zero-click RCE in Cursor AI editor <3.0. Flaws in sandbox & symlink handling enable attackers to escape IDE, compromise OS. Upgrade to v3.0+ now. https://radar.offseq.com/threat/critical-cursor-ai-code-editor-flaws-could-lead-to-2cf2d4969fcd376b #OffSeq #Infosec #Vuln #RCE", "creation_timestamp": "2026-07-03T09:00:30.418575Z"}, {"uuid": "fcaf51f9-469b-4782-a875-ab90d0456695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mpq6o42rfy2l", "content": "CRITICAL: DuneSlide (CVE-2026-50548/50549) in Cursor AI editor <3.0 enables zero-click RCE via sandbox escape. Upgrade to 3.0+ to patch. Details: https://radar.offseq.com/threat/critical-cursor-ai-code-editor-flaws-could-lead-to-2cf2d4969fcd376b #OffSeq #security #RCE", "creation_timestamp": "2026-07-03T09:00:59.464164Z"}, {"uuid": "b3f96b4b-107a-4c0d-bff1-76ec549dfe15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpqb6fecso2u", "content": "Critical Cursor AI editor flaws, CVE-2026-50548 and CVE-2026-50549, can trigger OS-level remote code execution outside the IDE sandbox. Patched in Cursor 3.0. #Cursor #CatoNetworks #DuneSlide", "creation_timestamp": "2026-07-03T09:45:26.136237Z"}, {"uuid": "10b06075-3080-4507-ae2b-a4b3a9b90d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/pondero-ai.bsky.social/post/3mpqh2hpzka2m", "content": "CVE-2026-50548 abused the working_directory parameter on Cursor's terminal tool. When the agent sets a non-default directory, Cursor adds that path to its allowed-write list without validating it. Injected instructions aimed that parameter at a system path instead.", "creation_timestamp": "2026-07-03T11:30:36.588743Z"}]}