🛡️ CVE-2026-50549

The items that name it 5

• Top 10 attacks on Claude Code and what each one actually broke
  writeup2026-09-23

  Issued to Cursor, part of Wiz's GhostApproval research into deceptive approval UI across six coding assistants.

• Top Agentic AI security resources — August 2026
  article2026-07-31

  Zero-click prompt injection RCE via symlink canonicalization fallback overwriting Cursor's sandbox helper, part of 'DuneSlide'

• GhostApproval: A Trust Boundary Gap in AI Coding Assistants
  writeup2026-07-08

  Published by Cursor on June 5, 2026 alongside their fix for the GhostApproval symlink vulnerability

• Vulnerability Garden
  tool2026-05-13
• Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
  article

  Abuses the symlink-resolution safety check: when resolution fails (target missing or read access removed), Cursor trusts the shortcut's in-project path and writes through it to the sandbox helper, disabling the sandbox.