PT-2026-47154

Name of the Vulnerable Software and Affected Versions Cursor versions prior to 3.0 Description A flaw exists in the agent terminal command sandbox that allows for sandbox escape via path traversal. The issue stems from improper input validation of the working directory parameter, which fails to...

PT-2026-47155

Name of the Vulnerable Software and Affected Versions Cursor affected versions not specified Description A sandbox escape exists in the agent component due to a symlink canonicalization failure combined with a writable working directory. This allows the agent to bypass sandbox restrictions and...