Browse CVEs

HIGH 8.8 CVE-2026-63093 Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placin… Cursor after 3.2.16 Fix from $1,9502026-07-17 CRITICAL 9.8 CVE-2026-50548 Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default, and the sandbox gra… Cursor 3.0+ Fix from $2,3002026-06-25 CRITICAL 9.8 CVE-2026-50549 Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default. Before a Write, the… Cursor 3.0+ Fix from $2,3002026-06-25 HIGH 8.8 CVE-2026-31854 Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously crafted instructions, the model may at… Cursor 2.0+ Fix from $1,9502026-03-11 CRITICAL 9.9 CVE-2026-26268 Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicio… Cursor 2.5+ Fix from $2,3002026-02-13 CRITICAL 9.8 CVE-2026-22708 Cursor is a code editor built for programming with AI. Prior to 2.3, hen the Cursor Agent is running in Auto-Run Mode with Allowlist mode enabled, ce… Cursor 2.3+ Fix from $2,3002026-01-14 HIGH 7.5 CVE-2025-64110 Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a malicious agent to read sensitive files tha… Cursor 2.0+ Fix from $1,9502025-11-05 HIGH 8.8 CVE-2025-64106 Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor's MCP server installation ena… Cursor 2.0+ Fix from $1,9502025-11-04 HIGH 8.8 CVE-2025-64107 Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings may lead to RCE. Cursor detects p… Cursor 2.0+ Fix from $1,9502025-11-04 HIGH 8.8 CVE-2025-64108 Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a prompt injection attacker to ci… Cursor 2.0+ Fix from $1,9502025-11-04 CRITICAL 9.8 CVE-2025-59944 Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sen… Cursor after 1.6.23 Fix from $2,3002025-10-03 HIGH 8.8 CVE-2025-61592 Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific CLI configuration from the cu… Cursor after 1.7 Fix from $1,9502025-10-03 HIGH 8.8 CVE-2025-61593 Cursor is a code editor built for programming with AI. In versions 1.7 and below, a vulnerability in the way Cursor CLI Agent protects its sensitive … Cursor after 1.7 Fix from $1,9502025-10-03 HIGH 8.8 CVE-2025-61591 Cursor is a code editor built for programming with AI. In versions 1.7 and below, when MCP uses OAuth authentication with an untrusted MCP server, an… Cursor after 1.7 Fix from $1,9502025-10-03 HIGH 7.5 CVE-2025-61590 Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution (RCE) attacks through Visual St… Cursor 1.7+ Fix from $1,9502025-10-03 MEDIUM 5.9 CVE-2025-61589 Cursor is a code editor built for programming with AI. In versions 1.6 and below, Mermaid (a to render diagrams) allows embedding images which then g… Cursor 1.7+ Fix from $1,6002025-10-03 CRITICAL 9.8 CVE-2025-54130 Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions less than 1.3.9. If… Cursor 1.3.9+ Fix from $2,3002025-08-05 CRITICAL 9.8 CVE-2025-54135 Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions below 1.3.9, If the… Cursor 1.3.9+ Fix from $2,3002025-08-05 CRITICAL 9.6 CVE-2025-54133 Cursor is a code editor built for programming with AI. In versions 1.17 through 1.2, there is a UI information disclosure vulnerability in Cursor's M… Cursor 1.3+ Fix from $2,3002025-08-02 HIGH 8.8 CVE-2025-54136EPSS 26% Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by mod… Cursor 1.3+ Fix from $1,9502025-08-02 HIGH 8.8 CVE-2025-54131 Cursor is a code editor built for programming with AI. In versions below 1.3, an attacker can bypass the allow list in auto-run mode with a backtick … Cursor 1.3+ Fix from $1,9502025-08-01 HIGH 7.5 CVE-2025-54132 Cursor is a code editor built for programming with AI. In versions below 1.3, Mermaid (which is used to render diagrams) allows embedding images whic… Cursor 1.3+ Fix from $1,9502025-08-01