CVE-2026-50549 — AI Deep Analysis Summary

🚨 **Essence**: When path normalization fails in Cursor’s “post-link” mechanism, it falls back to using the **original path**. 💥 **Consequence**: A malicious agent can write files to any location outside the workspace und…

🔍 **CWE**: Path normalization logic flaw (CWE-22 Path Traversal). 📍 **Defect Point**: When path normalization fails, the system falls back to the original path without validation and writes directly without whitelist app…

📦 **Affected Component**: Cursor Editor. 📉 **Affected Versions**: All versions prior to Cursor 3.0.

👑 **Privileges**: Runs with **current user privileges**. 📂 **Data/Operation**: Can write arbitrary files outside the workspace, ultimately leading to **remote code execution**.

📊 **Exploitability Threshold**: - **Authentication**: No authentication required (PR:N). - **Interaction**: No user interaction required (UI:N). - **Complexity**: Low (AC:L). - **Attack Vector**: Network (AV:N), extremel…

🧪 **PoC**: The `pocs` list in the current data is empty; there are no publicly available exploits. 🌍 **In-the-Wild Exploitation**: In-the-wild exploitation is not explicitly mentioned in the data; it is recommended to mo…

🔎 **Self-Check Method**: - Check if the Cursor version is < 3.0. - Monitor **anomalous file writes** outside the workspace. - Review records of path normalization failures in agent logs.

🛡️ **Official Fix**: - Upgrade to **Cursor 3.0** to fix the issue. - Refer to the advisory: GHSA-3v8f-48vw-3mjx.

🧯 **Temporary Mitigations**: - Restrict the agent’s file write permissions (sandboxing). - Disable or limit the “post-link” feature. - Monitor and intercept file creation/modification outside the workspace.

🔥 **Priority**: **High**. - High CVSS 4.0 score (VC:H, VI:H, VA:H). - No authentication, no interaction, and can lead to RCE. - **Immediately upgrade** to version 3.0 or higher.