{"data":{"id":"e10d1031-c223-4c9b-942e-9273ddc80246","title":"CVE-2026-73218: Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in…","summary":"CVE-2026-73218 affects Cursor IDE for macOS before 3.0.0. An agent running in Auto-Run Sandbox mode can, when Docker Desktop and the Dev Containers CLI are installed, launch a privileged container and mount Docker's virtiofs0. This grants read and write access to the user's home directory and host command execution with the user's privileges, without an additional permission prompt. The CVSS 4.0 base score from GitHub is 7.7 (HIGH).","solution":"Fixed in version 3.0.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73218","publishedAt":"2026-08-11T18:18:27.320Z","cveId":"CVE-2026-73218","cweIds":["CWE-269"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Cursor","Cursor IDE","Docker Desktop","Dev Containers CLI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Cursor IDE for macOS privilege escalation via Auto-Run Sandbox agent","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00634,"epssCheckedAt":"2026-11-11T00:13:30.372Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-09T06:14:08.628Z","patchAvailable":null,"disclosureDate":"2026-08-11T18:18:27.320Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}