Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
Cato AI Labs found two flaws in the Cursor AI code editor, tracked as CVE-2026-50548 and CVE-2026-50549 and rated 9.8 out of 10, that let a prompt injection planted in an MCP service or a web search result write a file the agent should not write and use...