Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

Two critical vulnerabilities named DuneSlide (CVE-2026-50548 and CVE-2026-50549) in the Cursor AI code editor allow a zero-click prompt-injection to write files that disable the editor's sandbox, enabling arbitrary commands to run as the user; both are rated highly severe (CVSS 9.8), were reported to Cursor in February 2026 and fixed in Cursor 3.0 (released April 2), and no known in-the-wild exploitation was reported at publication — immediate patching is recommended for users, especially in enterprise environments.