cursor

Top products

The 15 most recently published vulnerabilities affecting cursor.

• CVE-2026-73218Cursor: Sandbox escape via launching privileged containersAug 11, 2026
• CVE-2026-73217Cursor: Sandbox escape via tampered Python virtual environmentsAug 11, 2026
• CVE-2026-61613Cursor: Cloud Agent Browser Sandbox EscapeJul 15, 2026
• CVE-2026-50548Cursor Desktop sandbox escape via agent-controlled working directory9.8Jun 25, 2026
• CVE-2026-50549Cursor Desktop sandbox escape via symlink and failed path canonicalization9.8Jun 25, 2026
• CVE-2026-48124Cursor Desktop sandbox escape via Claude hook configurationJun 15, 2026
• CVE-2026-31854Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass8.8Mar 11, 2026
• CVE-2026-26268Cursor sandbox escape via Git hooks8.0Feb 13, 2026
• CVE-2026-22708Cursor has a Terminal Tool Allowlist Bypass via Environment Variables9.8Jan 14, 2026
• CVE-2025-62354Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allo...9.8Nov 26, 2025
• CVE-2025-64110Cursor: Authentication Bypass Possible via New Cursorignore Write7.5Nov 4, 2025
• CVE-2025-64109Cursor CLI Beta: Command Injection via Untrusted MCP Configuration8.8Nov 4, 2025
• CVE-2025-64108Cursor's Sensitive File Modification can Lead to NTFS Path Quirks8.8Nov 4, 2025
• CVE-2025-64107Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows8.8Nov 4, 2025
• CVE-2025-64106Cursor: Speedbump Modal Bypass in MCP Server Deep-Link8.8Nov 4, 2025