Between late July and mid-August 2026, security researchers disclosed six vulnerability classes in AI coding agents, all stemming from the same root cause: agents trust attacker-controlled content. On…
Three AI coding agents — Cursor, AWS Kiro, and GitHub's Agentic Workflows — were compromised this summer through prompt injection attacks, with researchers disclosing critical vulnerabilities includin…
Two critical vulnerabilities in Cursor IDE, collectively named DuneSlide and disclosed July 1 by Cato AI Labs, allow zero-click remote code execution via prompt injection, scoring 9.8 on CVSS 3.1. The…
Cato AI Labs disclosed two critical remote-code-execution vulnerabilities in Cursor IDE on July 1, 2026, tracked as CVE-2026-50548 and CVE-2026-50549, with a CVSS score of 9.8. The flaws allow zero-cl…
Researchers at Cato AI Labs discovered two critical sandbox escape vulnerabilities in Cursor's AI code editor, tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8/10 on CVSS 3.1. The flaws, c…