The Week of Sandbox Escapes Day 6: The hook was already in the workspace
ID: eb31815d-29c3-5f14-a3ce-c4afbc0e1cab
STIX ID: report--eb31815d-29c3-5f14-a3ce-c4afbc0e1cab
Feed Name: Pillar Security
Threat Score
This report documents a high-severity sandbox escape (CVE-2026-48124, CVSS 8.5) in Cursor Desktop where an agent may write .claude/settings.local.json hook configuration in a workspace and cause the host's hook engine to execute arbitrary local commands at turn end; the advisory notes affected versions (Cursor Desktop 2.4.37) and the fixed release (3.0.0) and recommends treating workspace-sourced hook configs as sensitive execution state or running hooks under the same sandbox/policy controls.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.