CVE-2026-50549

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

July 1, 2026

Last Seen

July 10, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerabilities in Cursor IDE Enable Zero-Click Prompt Injection Attacks72.6

Cato AI Labs disclosed two critical remote code execution (RCE) vulnerabilities in Cursor IDE, tracked as CVE-2026-50548 and CVE-2026-50549. These vulnerabilities allow attackers to exploit zero-click prompt injection, enabling arbitrary code execution without user interaction. The flaws arise from...

GhostApproval Vulnerability Exposes AI Coding Assistants to Remote Code Execution70.5

A vulnerability named GhostApproval has been discovered in six major AI coding assistants, including Amazon Q Developer, Anthropic Claude Code, Augment, Cursor, Google Antigravity, and Windsurf. This flaw allows malicious repositories to trick AI agents into accessing files outside their designated...