Vulnerability index

Browse CVEs

22 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Cursor HIGH 8.8
CVE-2026-63093

Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placin…

Fix: after 3.2.16
Fix from $1,950 2026-07-17
Cursor CRITICAL 9.8
CVE-2026-50548

Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default, and the sandbox gra…

Fix: 3.0+
Fix from $2,300 2026-06-25
Cursor CRITICAL 9.8
CVE-2026-50549

Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default. Before a Write, the…

Fix: 3.0+
Fix from $2,300 2026-06-25
Cursor HIGH 8.8
CVE-2026-31854

Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously crafted instructions, the model may at…

Fix: 2.0+
Fix from $1,950 2026-03-11
Cursor CRITICAL 9.9
CVE-2026-26268

Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicio…

Fix: 2.5+
Fix from $2,300 2026-02-13
Cursor CRITICAL 9.8
CVE-2026-22708

Cursor is a code editor built for programming with AI. Prior to 2.3, hen the Cursor Agent is running in Auto-Run Mode with Allowlist mode enabled, ce…

Fix: 2.3+
Fix from $2,300 2026-01-14
Cursor HIGH 7.5
CVE-2025-64110

Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a malicious agent to read sensitive files tha…

Fix: 2.0+
Fix from $1,950 2025-11-05
Cursor HIGH 8.8
CVE-2025-64106

Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor's MCP server installation ena…

Fix: 2.0+
Fix from $1,950 2025-11-04
Cursor HIGH 8.8
CVE-2025-64107

Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings may lead to RCE. Cursor detects p…

Fix: 2.0+
Fix from $1,950 2025-11-04
Cursor HIGH 8.8
CVE-2025-64108

Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a prompt injection attacker to ci…

Fix: 2.0+
Fix from $1,950 2025-11-04
Cursor CRITICAL 9.8
CVE-2025-59944

Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sen…

Fix: after 1.6.23
Fix from $2,300 2025-10-03
Cursor HIGH 8.8
CVE-2025-61592

Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific CLI configuration from the cu…

Fix: after 1.7
Fix from $1,950 2025-10-03
Cursor HIGH 8.8
CVE-2025-61593

Cursor is a code editor built for programming with AI. In versions 1.7 and below, a vulnerability in the way Cursor CLI Agent protects its sensitive …

Fix: after 1.7
Fix from $1,950 2025-10-03
Cursor HIGH 8.8
CVE-2025-61591

Cursor is a code editor built for programming with AI. In versions 1.7 and below, when MCP uses OAuth authentication with an untrusted MCP server, an…

Fix: after 1.7
Fix from $1,950 2025-10-03
Cursor HIGH 7.5
CVE-2025-61590

Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution (RCE) attacks through Visual St…

Fix: 1.7+
Fix from $1,950 2025-10-03
Cursor MEDIUM 5.9
CVE-2025-61589

Cursor is a code editor built for programming with AI. In versions 1.6 and below, Mermaid (a to render diagrams) allows embedding images which then g…

Fix: 1.7+
Fix from $1,600 2025-10-03
Cursor CRITICAL 9.8
CVE-2025-54130

Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions less than 1.3.9. If…

Fix: 1.3.9+
Fix from $2,300 2025-08-05
Cursor CRITICAL 9.8
CVE-2025-54135

Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions below 1.3.9, If the…

Fix: 1.3.9+
Fix from $2,300 2025-08-05
Cursor CRITICAL 9.6
CVE-2025-54133

Cursor is a code editor built for programming with AI. In versions 1.17 through 1.2, there is a UI information disclosure vulnerability in Cursor's M…

Fix: 1.3+
Fix from $2,300 2025-08-02
Cursor HIGH 8.8
CVE-2025-54136EPSS 26%

Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by mod…

Fix: 1.3+
Fix from $1,950 2025-08-02
Cursor HIGH 8.8
CVE-2025-54131

Cursor is a code editor built for programming with AI. In versions below 1.3, an attacker can bypass the allow list in auto-run mode with a backtick …

Fix: 1.3+
Fix from $1,950 2025-08-01
Cursor HIGH 7.5
CVE-2025-54132

Cursor is a code editor built for programming with AI. In versions below 1.3, Mermaid (which is used to render diagrams) allows embedding images whic…

Fix: 1.3+
Fix from $1,950 2025-08-01