"DuneSlide": two CVSS 9.8 Cursor IDE flaws let a zero-click prompt injection escape the sandbox to OS-level RCE — fixed in Cursor 3.0 · Jadid

Skip to content

JadidJust-in AI Developments, Incidents & Deadlines

Monday, July 6, 2026 · 1 of 4

"DuneSlide": two CVSS 9.8 Cursor IDE flaws let a zero-click prompt injection escape the sandbox to OS-level RCE — fixed in Cursor 3.0
(disclosed Jul 1)
Security

Read the full briefing · 5 stories