CVE Feed

    Dashboard / CVE / CVE-2026-73217

    CVE-2026-73217

    Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Python executable with a malicious wrapper that the Microsoft Python extension invokes outside the sandbox, allowing arbitrary host commands with the user's privileges, including modifying files outside the workspace and launching applications. This issue is fixed in version 3.1.2.

    Published:Aug 11, 2026
    Last Modified:Aug 12, 2026
    EPS:Aug 11, 2026
    EPSS Score:0.00312
    CVSS Score:7.7

    Affected Products

    Vendor
    Cursor
    Product
    Cursor

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-693 Protection Mechanism Failure

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs
    CAPEC-107 Cross Site Tracing
    CAPEC-127 Directory Indexing
    CAPEC-17 Using Malicious Files
    CAPEC-20 Encryption Brute Forcing
    CAPEC-22 Exploiting Trust in Client
    CAPEC-237 Escaping a Sandbox by Calling Code in Another Language
    CAPEC-36 Using Unpublished Interfaces or Functionality
    CAPEC-477 Signature Spoofing by Mixing Signed and Unsigned Content
    CAPEC-480 Escaping Virtualization
    CAPEC-51 Poison Web Service Registry
    CAPEC-57 Utilizing REST's Trust in the System Resource to Obtain Sensitive Data
    CAPEC-59 Session Credential Falsification through Prediction
    CAPEC-65 Sniff Application Code
    CAPEC-668 Key Negotiation of Bluetooth Attack (KNOB)
    CAPEC-74 Manipulating State
    CAPEC-87 Forceful Browsing

    Related CVEs

    CVE-2026-73218 (CVSS 7.7) — Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent ru…
    CVE-2026-61613 (CVSS 7.7) — Cursor is a code editor built for programming with AI. Prior to the Cloud Agent fix on 03/31/2026, browser-ena…
    CVE-2026-50548 (CVSS 9.3) — Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a …
    CVE-2026-50549 (CVSS 9.3) — Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a …
    CVE-2026-48124 (CVSS 8.5) — Cursor is a code editor built for programming with AI. In versions prior to 3.0.0, the Cursor Desktop could ex…
    CVE-2026-31854 (CVSS 8.7) — Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously…
    CVE-2026-26268 (CVSS 8) — Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possi…
    CVE-2026-22708 (CVSS 7.2) — Cursor is a code editor built for programming with AI. Prior to 2.3, hen the Cursor Agent is running in Auto-R…
    CVE-2025-62354 (CVSS 9.8) — Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an un…
    CVE-2025-64110 (CVSS 8.7) — Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a mali…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High