CVE-2026-73218
2026-08-11
18h18 +00:00
18h18 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a privileged container and mount Docker's virtiofs0, granting read and write access to the user's home directory and enabling host command execution with the user's privileges without an additional permission prompt. This issue is fixed in version 3.0.0.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Privilege Management The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. |
