⬇ Download holy card: ·
Saint DuneSlide, Who Slid Out of the Pen
Patron of AI-agent editors, sandboxes with low walls, and those who read the wrong pages.
Life
In 2026 Itay Ravia of Cato Networks revealed DuneSlide (CVE-2026-50548 and CVE-2026-50549), two flaws in the Cursor editor. The sandbox that confined the agent's commands granted write access to the working directory, but the agent could change that parameter and slide outside the perimeter. A single instruction hidden in a page or an MCP response was enough to write files outside the intended space and run code, with no click from the user.
Prayer
O Saint DuneSlide, who escapes the pen by changing where you look, teach our sandboxes not to trust those who choose their own bounds. Amen.
How to celebrate
Celebrated by updating Cursor to 3.0 and treating everything the agent reads as an order to be verified.
Sliding sand makes a fence that will not hold.