🛡️ CVE-2026-50548

The items that name it 3

• Top Agentic AI security resources — August 2026
  article2026-07-31

  Zero-click prompt injection RCE via MCP or poisoned search results abusing working_directory, part of 'DuneSlide'

• Vulnerability Garden
  tool2026-05-13
• Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
  article

  Abuses the working_directory parameter on Cursor's run_terminal_cmd tool to add an attacker-chosen path to the sandbox's allowed-write list, enabling overwrite of the sandbox helper or startup files like ~/.zshrc, disabling the sandbox.