CVE-2026-50548

Two critical vulnerabilities in Cursor IDE, collectively named DuneSlide and disclosed July 1 by Cato AI Labs, allow zero-click remote code execution via prompt injection, scoring 9.8 on CVSS 3.1. The…

Researchers discovered two sandbox bypass vulnerabilities in Cursor IDE that allow remote code execution via prompt injection. Tracked as CVE-2026-50548 and CVE-2026-50549, the flaws let attackers bre…

Researchers at Cato AI Labs discovered two critical sandbox escape vulnerabilities in Cursor's AI code editor, tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8/10 on CVSS 3.1. The flaws, c…