{"data":{"id":"4c9a880a-2e40-4ad2-b9e3-544415bc27c8","title":"CVE-2026-50548: Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox…","summary":"Cursor versions prior to 3.0 run agent terminal commands in a sandbox that grants write access to the command's working directory. A flaw in how the agent could modify the working_directory parameter let the sandbox include writable paths outside the workspace, so a malicious agent could write arbitrary files under the user's privileges, including overwriting the cursorsandbox helper to run later commands unsandboxed, with no user interaction beyond a benign prompt.","solution":"This vulnerability is fixed in 3.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-50548","publishedAt":"2026-06-25T19:16:39.660Z","cveId":"CVE-2026-50548","cweIds":["CWE-22"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Cursor"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Cursor sandbox escape through agent working_directory parameter","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01011,"epssCheckedAt":"2026-11-09T12:10:45.644Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-10T00:11:42.171Z","patchAvailable":null,"disclosureDate":"2026-06-25T19:16:39.660Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":1,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null,"fixes":[]}}