Cursor vulnerabilities
28 CVEs and advisories name Cursor as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-73218Cursor: Sandbox escape via launching privileged containers
- CVE-2026-73217Cursor: Sandbox escape via tampered Python virtual environments
- CVE-2026-61613Cursor: Cloud Agent Browser Sandbox Escape
- CVE-2026-50548Cursor Desktop sandbox escape via agent-controlled working directory
- CVE-2026-50549Cursor Desktop sandbox escape via symlink and failed path canonicalization
- CVE-2026-48124Cursor Desktop sandbox escape via Claude hook configuration
- CVE-2026-31854Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass
- CVE-2026-26268Cursor sandbox escape via Git hooks
- CVE-2026-22708Cursor has a Terminal Tool Allowlist Bypass via Environment Variables
- CVE-2025-62354Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute
- CVE-2025-64110Cursor: Authentication Bypass Possible via New Cursorignore Write
- CVE-2025-64109Cursor CLI Beta: Command Injection via Untrusted MCP Configuration
- CVE-2025-64108Cursor's Sensitive File Modification can Lead to NTFS Path Quirks
- CVE-2025-64107Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows
- CVE-2025-64106Cursor: Speedbump Modal Bypass in MCP Server Deep-Link
- CVE-2025-59944Cursor IDE: Sensitive File Overwrite Bypass is Possible
- CVE-2025-61593Cursor CLI Agent: Sensitive File Overwrite Bypass
- CVE-2025-61592Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config
- CVE-2025-61591Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Execution
- CVE-2025-61590Cursor is vulnerable to RCE via .code-workspace files using Prompt Injection
- CVE-2025-61589Cursor: Potential Information Leakage via Mermaid Diagram
- CVE-2025-9190TCC Bypass via misconfigured Node fuses in Cursor
- CVE-2025-54130Cursor Agent is vulnerable prompt injection via Editor Special Files
- CVE-2025-54135Cursor Agent is vulnerable to prompt injection via MCP Special Files
- CVE-2025-54136Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals
- CVE-2025-54133Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialog
- CVE-2025-54132Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetch
- CVE-2025-54131Cursor bypasses its allow list to execute arbitrary commands