Preliminary research
DuneSlide: Two Critical RCE vulnerabilities via Zero-Click Prompt Injection in Cursor IDE
AI-collected research leads through 1 October 2026, including a bounded September review of selected social and community sources. Unranked, incomplete, not community-vetted, and subject to change.
Two Cursor sandbox flaws turn indirect prompt injection into host code execution. An LLM-selected working directory expands the writable Seatbelt policy, while failed symlink canonicalization falls back to the in-project path; either path can overwrite Cursor's sandbox helper.
Record
- Researcher
- Itay Ravia
- Published by
- Cato Networks
- Date
- Topic
- Injection
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Itay Ravia, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .