Advisoriesby IbisCursorGHSA-v4xv-rqh3-w9mc
Sandbox escape via launching privileged containers
No fix yet
Docker Desktop VirtioFS escape: Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to escape the sandbox when Docker Desktop and the Dev Containers CLI are installed. Malicious agent instructions can launch a privileged container and mount Docker’s virtiofs0, granting read/write access to the user’s home directory and enabling host command execution with the user’s privileges without an additional permission prompt.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Cursor Product | all versions | No fix yet |
Details and references
- Severity from
- GitHub (reviewed advisory)