AIThe Hacker Newsabout 2 hours ago
Cursor flaws allow sandbox escape via prompt injection
1 min read
Two critical flaws in Cursor, tracked as CVE-2026-50548 and CVE-2026-50549, allow prompt injection to escape the sandbox and run arbitrary commands. Both rated 9.8 out of 10. Patched in Cursor 3.0 released April 2. No known exploitation in the wild.
Level
Hype check
Tap to vote and see what everyone thinks.
