VYPR
← All advisories
High severity8.0NVD Advisory· Published Feb 13, 2026· Updated Jun 17, 2026

CVE-2026-26268

CVE-2026-26268

Description

Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicious agent (ie prompt injection) could write to improperly protected .git settings, including git hooks, which may cause out-of-sandbox RCE next time they are triggered. No user interaction was required as Git executes these commands automatically. Fixed in version 2.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Anysphere/Cursor
    cpe:2.3:a:anysphere:cursor:*:*:*:*:*:*:*:*
    Range: <2.5
  • Getcursor/Cursorllm-create2 versions
    <2.5+ 1 more
    • (no CPE)range: <2.5
    • (no CPE)range: < 2.5

Patches

Vulnerability mechanics

References

1

News mentions

6