CVE-2026-26268: Cursor sandbox escape via Git hooks
Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicious agent (ie prompt injection) could write to improperly protected .git settings, including git hooks, which may cause out-of-sandbox RCE next time they are triggered. No user interaction was required as Git executes these commands automatically. Fixed in version 2.5.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-26268?
CVE-2026-26268 has been classified with a high severity due to its potential for causing unauthorized code execution through a sandbox escape.
How do I fix CVE-2026-26268?
To fix CVE-2026-26268, upgrade Cursor to version 2.5 or later to ensure proper protection of .git settings.
What versions of Cursor are affected by CVE-2026-26268?
Versions of Cursor prior to 2.5 are affected by CVE-2026-26268.
What type of vulnerability is CVE-2026-26268?
CVE-2026-26268 is a sandbox escape vulnerability that allows malicious agents to manipulate .git configurations.
Who can exploit CVE-2026-26268?
CVE-2026-26268 can be exploited by malicious agents through prompt injection techniques targeting vulnerable versions of Cursor.