{"data":{"id":"06dc6494-c91f-4174-a750-0e2fb30dbb92","title":"CVE-2026-22708: Cursor is a code editor built for programming with AI. Prior to 2.3, hen the Cursor Agent is running in Auto-Run Mode…","summary":"CVE-2026-22708 affects Cursor, a code editor built for programming with AI, prior to 2.3. When the Cursor Agent runs in Auto-Run Mode with Allowlist mode enabled, certain shell built-ins can execute without appearing in the allowlist and without user approval. An attacker using direct or indirect prompt injection can set, modify, or remove environment variables that influence trusted commands, poisoning the shell environment.","solution":"Fixed in 2.3.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-22708","publishedAt":"2026-01-14T17:16:08.980Z","cveId":"CVE-2026-22708","cweIds":["CWE-15","CWE-74","CWE-77","CWE-78","CWE-94","CWE-269","CWE-77"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Cursor"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Cursor shell built-ins bypass allowlist approval in Auto-Run Mode","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00817,"epssCheckedAt":"2026-11-04T18:09:13.386Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T00:12:44.670Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122","CAPEC-242","CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}