CVE-2026-50549 - Vulnerability Details

Related Threat Clusters

• Critical RCE Vulnerabilities in Cursor IDE Enable Zero-Click Prompt Injection Attacks

  Cato AI Labs disclosed two critical remote code execution (RCE) vulnerabilities in Cursor IDE, tracked as CVE-2026-50548 and CVE-2026-50549. These vulnerabilities allow attackers to exploit zero-click prompt injection,…

  35 articles · Updated July 1, 2026
• GhostApproval Vulnerability Exposes AI Coding Assistants to Remote Code Execution

  A vulnerability named GhostApproval has been discovered in six major AI coding assistants, including Amazon Q Developer, Anthropic Claude Code, Augment, Cursor, Google Antigravity, and Windsurf. This flaw allows…

  17 articles · Updated July 8, 2026

Recent Intelligence Reports

• GhostApproval — www.wiz.io · July 10, 2026
• Bug in top AI coding agents shows that Unix — Theregister · July 9, 2026
• Critical Cursor IDE RCE Vulnerabilities Enable Prompt Injection in Zero — Ground.News · July 2, 2026
• Critical Cursor IDE Flaws Let Attackers Execute Code via Zero — Gbhackers · July 2, 2026
• Critical Cursor IDE Flaws Let Attackers Execute Code via Zero — Gbhackers · July 2, 2026
• Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector — Csoonline · July 2, 2026
• 03 radar.offseq.com Zero-Click Prompt Injection to RCE in Cursor IDE: DuneSlide — radar.offseq.com · July 1, 2026
• Researchers Disclose Zero-Click RCE Flaws In Cursor IDE | Let's Data Science — Letsdatascience · July 1, 2026

Related Entities