CRITICALAi
Global

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

·Source: The Hacker News

Updated:

Executive Summary

Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore. Cato AI Labs found the pair and named them DuneSlide. They are tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8 out of 10 (or 9.3

Analysis

Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore. Cato AI Labs found the pair and named them DuneSlide. They are tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8 out of 10 (or 9.3

Indicators of Compromise (2)

CVE (2)
CVE-2026-50548
NVDMITRE CVE
CVE-2026-50549
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Jul 1, 2026.

Related Threats

MEDIUMAiNEW

‘BioShocking’ Attack Tricks AI Browsers Into Stealing Credentials

Researchers show how context manipulation can cause agentic browsers to abandon safety guardrails and exfiltrate sensitive credentials. The post ‘BioShocking’ Attack Tricks AI Browsers Into Stealing Credentials appeared first on SecurityWeek .

SecurityWeek
LOWAi

Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector

Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) that can be exploited through prompt injection to achieve remote code execution (RCE). The two flaws, tracked as CVE-2026-50548 and CVE-2026-50549 , allow attackers to break out of Cursor’s command execution sandbox, the protective layer that’s supposed to prevent the inter

CVE-2026-50548CVE-2026-50549
CSO Online
MEDIUMAi

OCBC adds AI-powered financial advisor avatars to app

OCBC has revamped its mobile app with two AI-powered avatars that deliver "hyper-personalised" wealth management services in real-time 24 hours a day.

Finextra