{"data":{"id":"a8eda14c-ee00-487e-b55b-76535495cd0c","title":"CVE-2026-50549: Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox…","summary":"Cursor versions before 3.0 run agent terminal commands in a sandbox by default. When the agent's path canonicalization fails before a Write, it falls back to the original path and writes without approval, so a malicious agent can use an in-workspace symlink to write arbitrary files outside the workspace under the user's privileges. This enables non-sandboxed Remote Code Execution, for example by overwriting the cursorsandbox helper, with no user interaction beyond a benign prompt.","solution":"Fixed in 3.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-50549","publishedAt":"2026-06-25T19:16:39.793Z","cveId":"CVE-2026-50549","cweIds":["CWE-59"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Cursor"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Cursor agent writes outside workspace through symlink path fallback","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01011,"epssCheckedAt":"2026-11-10T00:11:22.175Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-10T00:11:41.068Z","patchAvailable":null,"disclosureDate":"2026-06-25T19:16:39.793Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}