Threat · curated 1 Jul 2026
DuneSlide: Two Critical RCE vulnerabilities
First reported · updated · 3 reports catonetworks.com
Coverage timeline
Why it matters
DuneSlide shows how untrusted text read by an AI coding agent can pivot from prompt injection into classical sandbox-escape and RCE, exposing developer machines and connected SaaS workspaces across an IDE used by over half the Fortune 500.
Cato AI Labs disclosed two critical vulnerabilities in Cursor IDE, dubbed DuneSlide (CVE-2026-50548 and CVE-2026-50549, both CVSS 9.8), that allow zero-click prompt injection to escape the editor's command sandbox and achieve remote code execution. CVE-2026-50548 abuses the run_terminal_cmd tool's working_directory parameter to add attacker-chosen folders to the allowed-write list, letting an attacker overwrite the cursorsandbox binary or shell startup files and turn sandboxed commands into full system compromise. Cursor patched both in version 3.0, released April 2; earlier 2.x builds remain exposed.