Log in Start free

Cursor

Products

ProductCVEsExploitedLatest
Cursor28–Aug 11, 2026

Exploited and recent CVEs

  • CVE-2026-73218 High 7.7 Cursor: Sandbox escape via launching privileged containers 0.6%
  • CVE-2026-73217 High 7.7 Cursor: Sandbox escape via tampered Python virtual environments 0.4%
  • CVE-2026-61613 High 7.7 Cursor: Cloud Agent Browser Sandbox Escape 0.7%
  • CVE-2026-50548 Critical 9.3 Cursor Desktop sandbox escape via agent-controlled working directory 1.0%
  • CVE-2026-50549 Critical 9.3 Cursor Desktop sandbox escape via symlink and failed path canonicalization 1.0%
  • CVE-2026-48124 High 8.5 Cursor Desktop sandbox escape via Claude hook configuration 0.1%
  • CVE-2026-31854 High 8.7 Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass 0.4%
  • CVE-2026-26268 High 8.1 Cursor sandbox escape via Git hooks 0.7%
  • CVE-2026-22708 High 7.2 Cursor has a Terminal Tool Allowlist Bypass via Environment Variables 0.8%
  • CVE-2025-62354 Critical 9.8 Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowli 1.3%
  • CVE-2025-64110 High 8.7 Cursor: Authentication Bypass Possible via New Cursorignore Write 0.4%
  • CVE-2025-64109 High 8.8 Cursor CLI Beta: Command Injection via Untrusted MCP Configuration 0.5%
  • CVE-2025-64108 High 8.8 Cursor's Sensitive File Modification can Lead to NTFS Path Quirks 0.5%
  • CVE-2025-64107 High 8.8 Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows 0.4%
  • CVE-2025-64106 High 8.8 Cursor: Speedbump Modal Bypass in MCP Server Deep-Link 0.4%
  • CVE-2025-59944 High 8.1 Cursor IDE: Sensitive File Overwrite Bypass is Possible 0.5%
  • CVE-2025-61593 High 7.1 Cursor CLI Agent: Sensitive File Overwrite Bypass 0.4%
  • CVE-2025-61592 High 8.8 Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config 0.5%
  • CVE-2025-61591 High 8.8 Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Execution 1.2%
  • CVE-2025-61590 High 7.5 Cursor is vulnerable to RCE via .code-workspace files using Prompt Injection 0.5%
  • CVE-2025-61589 Medium 5.9 Cursor: Potential Information Leakage via Mermaid Diagram 0.3%
  • CVE-2025-9190 Medium 4.8 TCC Bypass via misconfigured Node fuses in Cursor 0.1%
  • CVE-2025-54130 High 7.5 Cursor Agent is vulnerable prompt injection via Editor Special Files 0.4%
  • CVE-2025-54135 High 8.6 Cursor Agent is vulnerable to prompt injection via MCP Special Files 2.1%
  • CVE-2025-54136 High 7.2 Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals 31.5%
  • CVE-2025-54133 Medium 5.3 Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialog 0.4%
  • CVE-2025-54132 Medium 4.4 Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetch 0.4%
  • CVE-2025-54131 Medium 6.4 Cursor bypasses its allow list to execute arbitrary commands 0.5%