CVE-2026-26268
Cursor sandbox escape via Git hooks
CRITICAL 9.9EPSS 0.5%
Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicious agent (ie prompt injection) could write to improperly protected .git settings, including git hooks, which may cause out-of-sandbox RCE next time they are triggered. No user interaction was required as Git executes these commands automatically. Fixed in version 2.5.
- Affected
- cursor
- CVSS v3.1 NVD
- 9.9 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS v3.1 GITHUB
- 8.0 HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - EPSS
- 0.48% chance of exploitation in the next 30 days, 40th percentile
- Published
- 2026-02-13
Proof-of-concept exploits (1)
- BOSSMANIWAY/blame-poisoning0★ · 2026-09-24