CVE-2026-50548: DuneSlide: Zero-Click RCE Flaws in Cursor AI Code Editor (CVSS 9.8)
CVE-2026-50548 is a critical-severity remote code execution issue (CVSS 9.8) in Zero-Click, an AI agent. Affected: all versions before Cursor 3.0 (patched in 3.0). Fixed in 3.0.
Is Zero-Click running on your developers' machines? Anomity finds every device with this AI agent installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
CVE-2026-50548- Severity
- critical
- CVSS score
- 9.8
- Attack type
- Remote code execution, Prompt injection
- Component
- Cursor · AI agent
- Known exploited
- No known exploitation
- Published
- Last verified
What is CVE-2026-50548?
Cato AI Labs disclosed DuneSlide, two critical flaws (CVE-2026-50548 and CVE-2026-50549, both CVSS 9.8) that let a single prompt escape Cursor's command sandbox and run arbitrary OS-level code. The trigger is zero-click: an innocuous prompt that ingests an attacker payload from an untrusted source such as an MCP server or web search result, handing over the developer machine and connected cloud/SaaS workspaces.
Affected versions
| Affected | Fixed in |
|---|---|
all versions before Cursor 3.0 (patched in 3.0) | 3.0 |
Am I affected by CVE-2026-50548?
You are affected if you run all versions before Cursor 3.0 (patched in 3.0). Versions 3.0 and later include the fix.
How do I fix CVE-2026-50548?
Upgrade Cursor to 3.0 or later and treat MCP outputs and web search results ingested by the agent as untrusted.
How do I find every machine running Zero-Click?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Zero-Click and which version, then enforce a policy on it.