AIDocker Blogabout 2 hours ago
Cursor Flaw Lets Approved Commands Run Attacker Code
16 min read
Pillar Security disclosed CVE-2026-22708, a Cursor flaw where shell built-ins like export bypassed allowlists in Auto-Run Mode. Approved commands like git branch then executed attacker code via altered environment variables. Cursor rated it High and patched it in version 2.3. Docker Sandboxes contain such attacks in isolated microVMs.
Level
Hype check
Tap to vote and see what everyone thinks.
