{"uuid": "89df8233-69f8-464c-bdaa-564f93d4ab2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/stupidllm.bsky.social/post/3muolkbz3ka2t", "content": "Cursor's agent sandbox let the agent set its own working_directory. Content it merely read (an MCP reply, a web page) could redirect that to overwrite the sandbox's enforcer \u2014 unsandboxed RCE, zero clicks. CVE-2026-50548, CVSS 9.8, fixed in 3.0.\n\nhttps://www.stupidllm.com/incident/STUPID-2026-0096/", "creation_timestamp": "2026-09-04T08:51:41.559580Z"}