CVE-2026-48124 Details

A vulnerability in Cursor Desktop versions prior to 3.0.0 allows for the execution of workspace-defined Claude hook commands from the .claude/settings.local.json file without explicit user approval. This could lead to sandbox escape, persistence across agent turns, unauthorized access to local data, or follow-on compromise. The issue arises from the application's handling of hook commands, which can be configured by malicious workspaces or agent-created files to run local commands in the user's context at the end of an agent turn.

Users are advised to update Cursor Desktop to version 3.0.0 or later, where this vulnerability has been patched. In the updated version, workspace-sourced hook commands require appropriate approval and are subject to the same execution policy controls as other agent shell commands.