Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore. Cato AI Labs found the pair and named them DuneSlide. They are...

CVE-2026-50548

creationtimestamp| type| source ---|---|--- 2026-06-26 01:30:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5saapazc2a 2026-06-27 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpbyqcckd52g 2026-07-01 17:39:00+00:00| seen|...