Critical Cursor Flaws Enable Zero-Click Sandbox Escape via Prompt Injection
Two critical vulnerabilities in Cursor, an AI-powered code editor, allow prompt injection attacks to escape the editor's safety sandbox and execute arbitrary…
Tag: sandbox escape
CVE-2026-26268: Git-hook sandbox escape in Cursor
A Git-hook sandbox escape vulnerability in Cursor, reported by Novee under coordinated disclosure and fixed in Cursor 2.5 on February 13, 2026.
CVE-2026-43725: WebKit Sandbox Escape Vulnerability
A vulnerability in WebKit that could allow a malicious website to process restricted web content outside the sandbox.
LiteLLM Vulnerability Chain Enables Full Server Takeover by Low-Privilege Users
A chain of three vulnerabilities in LiteLLM, a widely deployed open-source AI gateway, allows low-privilege users to escalate to full admin and…
X41 D-Sec Discovers LiteLLM Sandbox Escape Path
X41 D-Sec independently found a sandbox escape path in LiteLLM's Custom Code Guardrail playground endpoint, which bypassed a regex deny-list through runtime…
Endor Labs Discovers Critical isolated-vm Sandbox Escape
Endor Labs, a cybersecurity company, identified a critical vulnerability in the isolated-vm Node.js library. The flaw, GHSA-864f-rcv7-6rh4, allows sandboxed code to escape…