# cve.now: Cursor

The newest entries naming Cursor as an affected vendor (up to 200), of 28 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-73218](https://cve.now/CVE-2026-73218.md): Cursor: Sandbox escape via launching privileged containers (CVSS 7.7)
- [CVE-2026-73217](https://cve.now/CVE-2026-73217.md): Cursor: Sandbox escape via tampered Python virtual environments (CVSS 7.7)
- [CVE-2026-61613](https://cve.now/CVE-2026-61613.md): Cursor: Cloud Agent Browser Sandbox Escape (CVSS 7.7)
- [CVE-2026-50548](https://cve.now/CVE-2026-50548.md): Cursor Desktop sandbox escape via agent-controlled working directory (CVSS 9.3)
- [CVE-2026-50549](https://cve.now/CVE-2026-50549.md): Cursor Desktop sandbox escape via symlink and failed path canonicalization (CVSS 9.3)
- [CVE-2026-48124](https://cve.now/CVE-2026-48124.md): Cursor Desktop sandbox escape via Claude hook configuration (CVSS 8.5)
- [CVE-2026-31854](https://cve.now/CVE-2026-31854.md): Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass (CVSS 8.7)
- [CVE-2026-26268](https://cve.now/CVE-2026-26268.md): Cursor sandbox escape via Git hooks (CVSS 8.1)
- [CVE-2026-22708](https://cve.now/CVE-2026-22708.md): Cursor has a Terminal Tool Allowlist Bypass via Environment Variables (CVSS 7.2)
- [CVE-2025-62354](https://cve.now/CVE-2025-62354.md): Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute (CVSS 9.8)
- [CVE-2025-64110](https://cve.now/CVE-2025-64110.md): Cursor: Authentication Bypass Possible via New Cursorignore Write (CVSS 8.7)
- [CVE-2025-64109](https://cve.now/CVE-2025-64109.md): Cursor CLI Beta: Command Injection via Untrusted MCP Configuration (CVSS 8.8)
- [CVE-2025-64108](https://cve.now/CVE-2025-64108.md): Cursor's Sensitive File Modification can Lead to NTFS Path Quirks (CVSS 8.8)
- [CVE-2025-64107](https://cve.now/CVE-2025-64107.md): Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows (CVSS 8.8)
- [CVE-2025-64106](https://cve.now/CVE-2025-64106.md): Cursor: Speedbump Modal Bypass in MCP Server Deep-Link (CVSS 8.8)
- [CVE-2025-59944](https://cve.now/CVE-2025-59944.md): Cursor IDE: Sensitive File Overwrite Bypass is Possible (CVSS 8.1)
- [CVE-2025-61593](https://cve.now/CVE-2025-61593.md): Cursor CLI Agent: Sensitive File Overwrite Bypass (CVSS 7.1)
- [CVE-2025-61592](https://cve.now/CVE-2025-61592.md): Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config (CVSS 8.8)
- [CVE-2025-61591](https://cve.now/CVE-2025-61591.md): Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Execution (CVSS 8.8)
- [CVE-2025-61590](https://cve.now/CVE-2025-61590.md): Cursor is vulnerable to RCE via .code-workspace files using Prompt Injection (CVSS 7.5)
- [CVE-2025-61589](https://cve.now/CVE-2025-61589.md): Cursor: Potential Information Leakage via Mermaid Diagram (CVSS 5.9)
- [CVE-2025-9190](https://cve.now/CVE-2025-9190.md): TCC Bypass via misconfigured Node fuses in Cursor (CVSS 4.8)
- [CVE-2025-54130](https://cve.now/CVE-2025-54130.md): Cursor Agent is vulnerable prompt injection via Editor Special Files (CVSS 7.5)
- [CVE-2025-54135](https://cve.now/CVE-2025-54135.md): Cursor Agent is vulnerable to prompt injection via MCP Special Files (CVSS 8.6)
- [CVE-2025-54136](https://cve.now/CVE-2025-54136.md): Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals (CVSS 7.2)
- [CVE-2025-54133](https://cve.now/CVE-2025-54133.md): Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialog (CVSS 5.3)
- [CVE-2025-54132](https://cve.now/CVE-2025-54132.md): Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetch (CVSS 4.4)
- [CVE-2025-54131](https://cve.now/CVE-2025-54131.md): Cursor bypasses its allow list to execute arbitrary commands (CVSS 6.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/cursor
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.