ViralTopic

Cursor dev tunnel sandbox breakout

April 4, 2026Malware Unicorn

Malware Unicorn says they found a sandbox breakout and remote dev tunnel bug in Cursor, naming it NomShub and describing building a C2 dashboard via the VS Code dev tunnel workflow.

New blog: We found a sandbox breakout and remote dev tunnel bug in Cursor.
Called it NomShub.
It was fun making my vscode dev tunnel C2 dashboard pink.
Malware Unicorn
vulnerabilitydevtoolssandbox-escape

See what experts are saying right now

This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.

← Back to Cyber Security