CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-26268: Git-hook sandbox escape in Cursor

July 1, 2026

A Git-hook sandbox escape vulnerability in Cursor, reported by Novee under coordinated disclosure and fixed in Cursor 2.5 on February 13, 2026.