AI developer toolsBriefConfirmed by two or more outlets
Cursor 2026 CVEs
CVE-2026-22708: shell built-ins bypass the Auto-Run allowlist.
- Disclosed
What happened
- CVE-2026-22708: shell built-ins bypass the Auto-Run allowlist. Fixed in 2.3.
- CVE-2026-26268: malicious repo with Git hooks (Novee). Fixed Feb 2026.
- CVE-2026-48124: malicious workspace. Fixed in 3.0.0.
- “DuneSlide”, CVE-2026-50548 / -50549 (Cato, CVSS 9.8): prompt injection to OS-level RCE. Fixed in Cursor 3.0, released 2 Apr 2026.
- CVE-2026-63093: Windows git.exe planting in the repo root.
- CVE-2026-73217: macOS sandbox escape. Fixed in 3.1.2.
Live scores
Live scores
CVE-2026-22708- EPSS
- 0.008
low predicted chance of attack - VEDAS
- 0.053
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-26268- EPSS
- 0.007
low predicted chance of attack - VEDAS
- 0.054
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-48124- EPSS
- 0.001
low predicted chance of attack - VEDAS
- 0.044
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- Out of scope (local)
Live scores
CVE-2026-50548- EPSS
- 0.010
some chance of attack soon - VEDAS
- 0.044
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-50549- EPSS
- 0.010
some chance of attack soon - VEDAS
- 0.044
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2026-63093- EPSS
- 0.008
low predicted chance of attack - VEDAS
- 0.049
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Sources
- https://www.securityweek.com/critical-cursor-ai-ide-flaws-could-lead-to-os-level-remote-code-execution/
- https://hackread.com/cursor-ai-ide-vulnerability-code-execution-git-hooks/
- https://www.sentinelone.com/vulnerability-database/cve-2026-73217/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.