CVE-2026-73217: Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in A
Summary
Cursor is a code editor designed for programming with AI assistance. Before version 3.1.2, Cursor IDE on macOS had a security flaw where an AI agent running in Auto-Run Sandbox mode (a restricted environment meant to limit what code can do) could trick the system into running malicious Python code outside the sandbox with full user privileges, potentially allowing an attacker to modify files and launch programs. This vulnerability is fixed in version 3.1.2.
Solution / Mitigation
Update Cursor IDE to version 3.1.2 or later.
Vulnerability Details
EPSS: 0.0%
August 11, 2026
Classification
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-73217
First tracked: August 11, 2026 at 08:08 PM
Classified by LLM (prompt v3) · confidence: 85%