getcursor

Products

ProductCVEsExploitedLatest
cursor4–Jun 11, 2025

Exploited and recent CVEs

  • CVE-2025-49150 Medium 5.9 Cursor Agent Potentially Leaks Information using JSON schema 0.4%
  • CVE-2025-32018 High 8.1 Arbitrary file write from Cursor Agent through a prompt injection from malicious @Docs 0.4%
  • CVE-2024-48919 Critical 9.2 RCE via Prompt Injection Into Cursor's Terminal Cmd-K 0.5%
  • CVE-2024-45599 Low 3.8 TCC Bypass in Cursor's macOS Application 0.2%