CVE-2026-50548

Published Jun 25, 2026

Last updated 10 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-50548 is a sandbox escape vulnerability found in the Cursor AI code editor, affecting versions prior to 3.0. The flaw stems from how the editor's agent handles terminal commands within its sandbox environment. While the sandbox is designed to restrict write access to the command's working directory, a malicious agent could manipulate the `working_directory` parameter. This manipulation allows the sandbox to include writable paths outside the intended workspace, enabling the agent to write arbitrary files to sensitive locations with the user's privileges. This vulnerability can lead to non-sandboxed remote code execution, for instance, by overwriting critical helper files, and can be exploited without user interaction beyond an initial benign prompt.

Description: Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default, and the sandbox grants write access to the command's working directory. A flaw was identified in how the agent could modify the working_directory parameter, which could cause the sandbox to include writable paths outside the intended workspace. A malicious agent could set working_directory to a sensitive location and write arbitrary files outside the workspace under the user's privileges. This enables non-sandboxed Remote Code Execution — for example by overwriting the cursorsandbox helper so later commands run unsandboxed — with no user interaction beyond a benign prompt. This vulnerability is fixed in 3.0.
Source: security-advisories@github.com
NVD status: Analyzed
Products: cursor

Risk scores

CVSS 4.0

Type: Secondary
Base score: 9.3
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: CRITICAL

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

security-advisories@github.com: CWE-22

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:anysphere:cursor:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "157F84FF-1732-49FF-BFB0-1A65EB76DAD2",
            "versionEndExcluding": "3.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.