# CVE-2026-50548: DuneSlide: Zero-Click RCE Flaws in Cursor AI Code Editor (CVSS 9.8)

> CVE-2026-50548 is a critical-severity remote code execution issue (CVSS 9.8) in Zero-Click, an AI agent. Affected: all versions before Cursor 3.0 (patched in 3.0). Fixed in 3.0.

- **Canonical URL:** https://catalog.anomity.ai/vuln/cve-2026-50548
- **Aliases:** ti-046
- **Severity:** critical
- **CVSS:** 9.8
- **Attack type:** Remote code execution, Prompt injection
- **Component:** Zero-Click (AI agent)
- **Catalog entry:** https://catalog.anomity.ai/agent/cursor
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-07-01
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/cve-2026-50548

## Summary

Cato AI Labs disclosed DuneSlide, two critical flaws (CVE-2026-50548 and CVE-2026-50549, both CVSS 9.8) that let a single prompt escape Cursor's command sandbox and run arbitrary OS-level code. The trigger is zero-click: an innocuous prompt that ingests an attacker payload from an untrusted source such as an MCP server or web search result, handing over the developer machine and connected cloud/SaaS workspaces.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| all versions before Cursor 3.0 (patched in 3.0) | 3.0 |

## Am I affected by CVE-2026-50548?

You are affected if you run all versions before Cursor 3.0 (patched in 3.0). Versions 3.0 and later include the fix.

## How do I fix CVE-2026-50548?

Upgrade Cursor to 3.0 or later and treat MCP outputs and web search results ingested by the agent as untrusted.

## How do I find every machine running Zero-Click?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Zero-Click and which version, then enforce a policy on it.

## References

- article: https://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html
- cve: https://nvd.nist.gov/vuln/detail/CVE-2026-50548

## Related vulnerabilities

- [ghostapproval-symlink-bypass-hits-claude-code-cursor-windsurf](https://catalog.anomity.ai/vuln/ghostapproval-symlink-bypass-hits-claude-code-cursor-windsurf) — high
- [symantec-the-aoki-infostealer-now-takes-claude-codex-cursor-copilot](https://catalog.anomity.ai/vuln/symantec-the-aoki-infostealer-now-takes-claude-codex-cursor-copilot) — high
- [CVE-2025-54133](https://catalog.anomity.ai/vuln/cve-2025-54133) — high
- [agentjacking-public-sentry-dsn-hijacks-claude-code-cursor-codex-via-mcp](https://catalog.anomity.ai/vuln/agentjacking-public-sentry-dsn-hijacks-claude-code-cursor-codex-via-mcp) — high
- [trojanized-claude-code-extension-2-1-313-in-cursor-s-marketplace](https://catalog.anomity.ai/vuln/trojanized-claude-code-extension-2-1-313-in-cursor-s-marketplace) — critical
- [tensorlake-npm-sdk-0-5-144-compromised-by-a-shai-hulud-chaindrop-worm](https://catalog.anomity.ai/vuln/tensorlake-npm-sdk-0-5-144-compromised-by-a-shai-hulud-chaindrop-worm) — critical

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=cve-2026-50548