Skip to content
Vulnerability intelligence

CVE-2026-50549

CVE-2026-50548 and CVE-2026-50549 — dubbed DuneSlide — let a prompt injection escape Cursor's sandbox and execute arbitrary commands with developer privileges. More than half the Fortune 500 use Cursor. Every version before 3.0 was vulnerable.

2026
What WebPulse reported · 4 analyses
Two Cursor IDE Flaws Let Attackers Escape the Sandbox

CVE-2026-50548 and CVE-2026-50549 — dubbed DuneSlide — let a prompt injection escape Cursor's sandbox and execute arbitrary commands with developer privileges.

July 4, 2026
New Malware Steals AI Coding Tool Credentials

A new cross-platform infostealer deployed through a SimpleHelp authentication bypass explicitly targets AI development assistant tokens, cloud platform credenti

July 5, 2026
28 CVEs in Claude Code: AI Coding Tools as Attack Surface

Anthropic's Claude Code has accumulated 28 CVEs in its first year, including two CVSS 10.0 critical sandbox escapes. CVE-2026-46406, the latest, let any local u

July 4, 2026
Cursor AI Editor: Two CVSS 9.8 Sandbox Escapes Let a Malicious Agent Write Anywhere on Disk

CVE-2026-50548 and CVE-2026-50549: working directory manipulation and symlink canonicalization bypass in Cursor pre-3.0. The AI coding tool that developers trus

June 27, 2026
View CVE-2026-50549 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-9082 CVE-2026-50548 CVE-2026-48019 CVE-2026-35273 CVE-2026-11645 CVE-2026-8181 CVE-2026-47291 CVE-2026-45657