The Week of Sandbox Escapes Day 3: The sandbox let me edit a venv, and something else ran it
ID: 512f2eeb-eaa4-5e3a-8548-8159f14c4ec7
STIX ID: report--512f2eeb-eaa4-5e3a-8548-8159f14c4ec7
Feed Name: Pillar Security
Threat Score
**Executive summary:** The report demonstrates a sandbox-escape vulnerability in Cursor's macOS setup where automated Python interpreter discovery (run outside the sandbox) can be triggered by files an AI agent is allowed to write, enabling arbitrary host code execution via a trojanized virtual environment; a PoC, mitigation guidance, and a pending CVE are included.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.