CVE-2026-50548

CVE

Threat entity extracted from intelligence sources

Frequency

9

occurrences

First Seen

July 1, 2026

Last Seen

July 2, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerabilities in Cursor IDE Enable Zero-Click Prompt Injection Attacks72.6

Cato AI Labs disclosed two critical remote code execution (RCE) vulnerabilities in Cursor IDE, tracked as CVE-2026-50548 and CVE-2026-50549. These vulnerabilities allow attackers to exploit zero-click prompt injection, enabling arbitrary code execution without user interaction. The flaws arise from...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical RCE Vulnerabilities in Cursor IDE Enable Zero-Click Prompt Injection Attacks

Jul 1·37 sources

Related Articles (9)

Cursor patches DuneSlide flaws that enable zero-click RCE

Aiweekly.Co·Jul 2

Critical Cursor IDE RCE Vulnerabilities Enable Prompt Injection in Zero

Ground.News·Jul 2

Critical Cursor IDE Flaws Let Attackers Execute Code via Zero

Gbhackers·Jul 2

Critical Cursor IDE Flaws Let Attackers Execute Code via Zero

Gbhackers·Jul 2

Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector

Csoonline·Jul 2

1 / 2

Related Entities

Zero-day Exploit Brute Force Supply Chain Attack Remote Code Execution Ransomware Microsoft Cato AI Labs Cato Networks Cursor CVE-2026-50549 CWE-22 - Path Traversal CWE-94 - Code Injection