{"data":{"id":"8f60d6e0-e0f7-45ae-a72b-391d74311687","title":"CVE-2026-73217: Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in A","summary":"Cursor is a code editor designed for programming with AI assistance. Before version 3.1.2, Cursor IDE on macOS had a security flaw where an AI agent running in Auto-Run Sandbox mode (a restricted environment meant to limit what code can do) could trick the system into running malicious Python code outside the sandbox with full user privileges, potentially allowing an attacker to modify files and launch programs. This vulnerability is fixed in version 3.1.2.","solution":"Update Cursor IDE to version 3.1.2 or later.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73217","publishedAt":"2026-08-11T18:18:27.180Z","cveId":"CVE-2026-73217","cweIds":["CWE-693"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["Cursor"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-11T18:18:27.180Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}