CVE-2026-22708

CVE-2026-22708 affects Cursor, a code editor with AI capabilities, specifically versions prior to 2.3. This critical vulnerability allows attackers to bypass allowlist restrictions in Auto-Run Mode when the Cursor Agent is active, enabling the execution of certain shell built-ins without approval. The attack vector is network-based with low complexity, requiring no user interaction, and can lead to complete compromise of confidentiality, integrity, and availability by poisoning the shell environment. While there is no known active exploitation, public exploit code, or KEV entry, the vulnerability has garnered significant community discussion, indicating awareness and potential future exploitation.