CVE-2026-26268highCWE-862

CVE-2026-26268: falha de alta gravidade em cursor

Cursor sandbox escape via Git hooks

Publicada em

Seguir esta CVE+ Monitorar cursor

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.1epss 0.7%
Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicious agent (ie prompt injection) could write to improperly protected .git settings, including git hooks, which may cause out-of-sandbox RCE next time they are triggered. No user interaction was required as Git executes these commands automatically. Fixed in version 2.5.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
cursor · cursor
CVEs relacionadas — cursor

No mesmo produto, das mais perigosas para as menos.

CVE-2025-54136HIGHCursor's Modification of MCP Server Definitions Bypasses Manual Re-approvalsEPSS 31.5%CVE-2025-54135HIGHCursor Agent is vulnerable to prompt injection via MCP Special FilesEPSS 2.1%CVE-2025-62354CRITICALCVE-2025-62354EPSS 1.3%CVE-2025-61591HIGHCursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code ExecutionEPSS 1.2%CVE-2026-50548CRITICALCursor Desktop sandbox escape via agent-controlled working directoryEPSS 1.0%CVE-2026-50549CRITICALCursor Desktop sandbox escape via symlink and failed path canonicalizationEPSS 1.0%