CVE-2026-73218
HighCVSS 7.7Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
Cursor IDE for macOS before version 3.0.0 allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and Dev Containers CLI are installed, to launch a privileged container and mount Docker's virtiofs0, granting read/write access to the user's home directory and enabling host command execution with the user's privileges without an additional permission prompt.
Risk Assessment
An attacker can gain full access to user files and execute commands on the host, potentially leading to data theft, malware installation, or complete system compromise.
Recommendation
Update Cursor IDE to version 3.0.0 or later and restrict the use of Auto-Run Sandbox mode in environments with Docker Desktop.
Original NVD description (English source)
Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a privileged container and mount Docker's virtiofs0, granting read and write access to the user's home directory and enabling host command execution with the user's privileges without an additional permission prompt. This issue is fixed in version 3.0.0.