--- title: "Cursor IDE Vulnerabilities Let Prompt Injection Escape the Sandbox" url: https://daily.dev/posts/cursor-ide-vulnerabilities-let-prompt-injection-escape-the-sandbox-gf53uatdq source_url: https://latesthackingnews.com/2026/07/02/cursor-ide-vulnerabilities-sandbox-escape type: article source: "Latest Hacking News" published: 2026-07-02T12:14:30.158Z updated: 2026-07-02T12:26:58.356Z tags: ["security", "ai-agents", "prompt-injection"] reading_time: 5 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Cursor IDE Vulnerabilities Let Prompt Injection Escape the Sandbox **[Latest Hacking News](https://daily.dev/sources/lhn)** · 5 min read · 0 upvotes · 0 comments ## Summary Two critical Cursor IDE vulnerabilities (CVE-2026-50548 and CVE-2026-50549), collectively dubbed DuneSlide, allow prompt injection attacks to escape the editor's command sandbox with no user interaction required. Both score 9.8 on CVSS 3.1. The first flaw exploits the run_terminal_cmd tool's working_directory parameter to write outside the sandbox; the second abuses a symlink resolution fallback. An attacker can deliver malicious instructions via MCP server responses or fetched web pages that the AI agent reads during normal operation. Once the sandbox helper is overwritten, subsequent commands run unsandboxed with full developer privileges. Cursor patched both issues in version 3.0 (released April 2). All 2.x builds remain vulnerable. Developers should update immediately and treat all agent-readable content as untrusted input. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector](https://daily.dev/posts/sandbox-bypass-flaws-in-cursor-ide-highlight-prompt-injection-as-an-rce-vector-fnfy3vrj6) · CSO Online · 0 upvotes · 0 comments - [Critical Cursor bug could turn routine Git into RCE](https://daily.dev/posts/critical-cursor-bug-could-turn-routine-git-into-rce-pedjrotwl) · CSO Online · 0 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#prompt-injection](https://daily.dev/tags/prompt-injection) [View this post on daily.dev](https://daily.dev/posts/cursor-ide-vulnerabilities-let-prompt-injection-escape-the-sandbox-gf53uatdq)