Privilege escalation in Cursor

CVE-2026-73218

Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a privileged container an…

Vulnerability class: Privilege Escalation

Affected products

Weakness classification (CWE)

References