{"data":{"id":"8f60d6e0-e0f7-45ae-a72b-391d74311687","title":"CVE-2026-73217: Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in…","summary":"CVE-2026-73217 affects Cursor IDE for macOS before 3.1.2. An agent running in Auto-Run Sandbox mode can replace a virtual environment's Python executable with a malicious wrapper, which the Microsoft Python extension invokes outside the sandbox. This allows arbitrary host commands with the user's privileges, including modifying files outside the workspace and launching applications. The CVSS 4.0 base score from GitHub, Inc. is 7.7 (HIGH), and the weakness is CWE-693.","solution":"Fixed in version 3.1.2.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73217","publishedAt":"2026-08-11T18:18:27.180Z","cveId":"CVE-2026-73217","cweIds":["CWE-693"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Cursor"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Cursor IDE for macOS sandbox escape via Python venv replacement","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00428,"epssCheckedAt":"2026-11-14T00:05:46.286Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-09T06:14:08.904Z","patchAvailable":null,"disclosureDate":"2026-08-11T18:18:27.180Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}