Privilege Escalation Vulnerability in Cursor IDE for macOS

CVE-2026-73218

What is CVE-2026-73218?

Cursor IDE for macOS versions prior to 3.0.0 contains a vulnerability that allows an agent running in Auto-Run Sandbox mode, in conjunction with Docker Desktop and Dev Containers CLI, to initiate a privileged container. This configuration enables the agent to mount Docker's virtiofs0, which results in unauthorized read and write access to the user's home directory. Moreover, this vulnerability can lead to the execution of commands on the host with the user's privileges without prompting for additional permissions, posing a significant security risk.

References