# cursor.

Every CVE that names cursor among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Cursor: Sandbox escape via launching privileged containers](https://agentprime.io/advisories/CVE-2026-73218.md)
  `CVE-2026-73218` · CVE record: cursor cursor · CVSS 7.7 High · Not analysed yet · Published 11 Aug 2026 · Tags: Privilege escalation
- [Cursor: Sandbox escape via tampered Python virtual environments](https://agentprime.io/advisories/CVE-2026-73217.md)
  `CVE-2026-73217` · CVE record: cursor cursor · CVSS 7.7 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-693
- [Cursor: Cloud Agent Browser Sandbox Escape](https://agentprime.io/advisories/CVE-2026-61613.md)
  `CVE-2026-61613` · CVE record: cursor cursor · CVSS 7.7 High · Not analysed yet · Published 15 Jul 2026 · Tags: Authentication bypass
- [Cursor Desktop sandbox escape via agent-controlled working directory](https://agentprime.io/advisories/CVE-2026-50548.md)
  `CVE-2026-50548` · CVE record: cursor cursor · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Jun 2026 · Tags: Path traversal
- [Cursor Desktop sandbox escape via symlink and failed path canonicalization](https://agentprime.io/advisories/CVE-2026-50549.md)
  `CVE-2026-50549` · CVE record: cursor cursor · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Jun 2026 · Tags: Path traversal
- [Cursor Desktop sandbox escape via Claude hook configuration](https://agentprime.io/advisories/CVE-2026-48124.md)
  `CVE-2026-48124` · CVE record: cursor cursor · CVSS 8.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: Code injection, CWE-829
- [Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass](https://agentprime.io/advisories/CVE-2026-31854.md)
  `CVE-2026-31854` · CVE record: cursor cursor · CVSS 8.7 High · Not analysed yet · Published 11 Mar 2026 · Tags: Command injection
- [Cursor sandbox escape via Git hooks](https://agentprime.io/advisories/CVE-2026-26268.md)
  `CVE-2026-26268` · CVE record: cursor cursor · CVSS 8.1 High · Not analysed yet · Published 13 Feb 2026 · Tags: Broken access control
- [Cursor has a Terminal Tool Allowlist Bypass via Environment Variables](https://agentprime.io/advisories/CVE-2026-22708.md)
  `CVE-2026-22708` · CVE record: cursor cursor · CVSS 7.2 High · Not analysed yet · Published 14 Jan 2026 · Tags: Other injection, Command injection, Code injection, Privilege escalation
- [OS command injection in cursor](https://agentprime.io/advisories/CVE-2025-62354.md)
  `CVE-2025-62354` · CVE record: cursor cursor · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Nov 2025 · Tags: Command injection
- [Cursor: Authentication Bypass Possible via New Cursorignore Write](https://agentprime.io/advisories/CVE-2025-64110.md)
  `CVE-2025-64110` · CVE record: cursor cursor · CVSS 8.7 High · Not analysed yet · Published 4 Nov 2025 · Tags: Broken access control
- [Cursor CLI Beta: Command Injection via Untrusted MCP Configuration](https://agentprime.io/advisories/CVE-2025-64109.md)
  `CVE-2025-64109` · CVE record: cursor cursor · CVSS 8.8 High · Not analysed yet · Published 4 Nov 2025 · Tags: Command injection
- [Cursor's Sensitive File Modification can Lead to NTFS Path Quirks](https://agentprime.io/advisories/CVE-2025-64108.md)
  `CVE-2025-64108` · CVE record: cursor cursor · CVSS 8.8 High · Not analysed yet · Published 4 Nov 2025 · Tags: Path traversal, Code injection
- [Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows](https://agentprime.io/advisories/CVE-2025-64107.md)
  `CVE-2025-64107` · CVE record: cursor cursor · CVSS 8.8 High · Not analysed yet · Published 4 Nov 2025 · Tags: Path traversal
- [Cursor: Speedbump Modal Bypass in MCP Server Deep-Link](https://agentprime.io/advisories/CVE-2025-64106.md)
  `CVE-2025-64106` · CVE record: cursor cursor · CVSS 8.8 High · Not analysed yet · Published 4 Nov 2025 · Tags: Command injection
- [Cursor IDE: Sensitive File Overwrite Bypass is Possible](https://agentprime.io/advisories/CVE-2025-59944.md)
  `CVE-2025-59944` · CVE record: cursor cursor · CVSS 8.1 High · Not analysed yet · Published 3 Oct 2025 · Tags: CWE-178
- [Cursor CLI Agent: Sensitive File Overwrite Bypass](https://agentprime.io/advisories/CVE-2025-61593.md)
  `CVE-2025-61593` · CVE record: cursor cursor · CVSS 7.1 High · Not analysed yet · Published 3 Oct 2025 · Tags: Code injection, CWE-178
- [Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config](https://agentprime.io/advisories/CVE-2025-61592.md)
  `CVE-2025-61592` · CVE record: cursor cursor · CVSS 8.8 High · Not analysed yet · Published 3 Oct 2025 · Tags: CWE-829
- [Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Execution](https://agentprime.io/advisories/CVE-2025-61591.md)
  `CVE-2025-61591` · CVE record: cursor cursor · CVSS 8.8 High · Not analysed yet · Published 3 Oct 2025 · Tags: Command injection
- [Cursor is vulnerable to RCE via .code-workspace files using Prompt Injection](https://agentprime.io/advisories/CVE-2025-61590.md)
  `CVE-2025-61590` · CVE record: cursor cursor · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2025 · Tags: Code injection
- [Cursor: Potential Information Leakage via Mermaid Diagram](https://agentprime.io/advisories/CVE-2025-61589.md)
  `CVE-2025-61589` · CVE record: cursor cursor · CVSS 5.9 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Information disclosure
- [TCC Bypass via misconfigured Node fuses in Cursor](https://agentprime.io/advisories/CVE-2025-9190.md)
  `CVE-2025-9190` · CVE record: Cursor Cursor · CVSS 4.8 Medium · Not analysed yet · Published 26 Aug 2025 · Tags: Broken access control
- [Cursor Agent is vulnerable prompt injection via Editor Special Files](https://agentprime.io/advisories/CVE-2025-54130.md)
  `CVE-2025-54130` · CVE record: cursor cursor · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2025 · Tags: Broken access control
- [Cursor Agent is vulnerable to prompt injection via MCP Special Files](https://agentprime.io/advisories/CVE-2025-54135.md)
  `CVE-2025-54135` · CVE record: cursor cursor · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2025 · Tags: Command injection, CWE-829
- [Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals](https://agentprime.io/advisories/CVE-2025-54136.md)
  `CVE-2025-54136` · CVE record: cursor cursor · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.32 · Not analysed yet · Published 1 Aug 2025 · Tags: Command injection
- [Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialog](https://agentprime.io/advisories/CVE-2025-54133.md)
  `CVE-2025-54133` · CVE record: cursor cursor · CVSS 5.3 Medium · Not analysed yet · Published 1 Aug 2025 · Tags: Command injection, Information disclosure
- [Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetch](https://agentprime.io/advisories/CVE-2025-54132.md)
  `CVE-2025-54132` · CVE record: cursor cursor · CVSS 4.4 Medium · Not analysed yet · Published 1 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [Cursor bypasses its allow list to execute arbitrary commands](https://agentprime.io/advisories/CVE-2025-54131.md)
  `CVE-2025-54131` · CVE record: cursor cursor · CVSS 6.4 Medium · Not analysed yet · Published 1 Aug 2025 · Tags: Command injection
- [Cursor Agent Potentially Leaks Information using JSON schema](https://agentprime.io/advisories/CVE-2025-49150.md)
  `CVE-2025-49150` · CVE record: getcursor cursor · CVSS 5.9 Medium · Not analysed yet · Published 11 Jun 2025 · Tags: Information disclosure
- [Arbitrary file write from Cursor Agent through a prompt injection from malicious @Docs](https://agentprime.io/advisories/CVE-2025-32018.md)
  `CVE-2025-32018` · CVE record: getcursor cursor · CVSS 8.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: Path traversal
- [RCE via Prompt Injection Into Cursor's Terminal Cmd-K](https://agentprime.io/advisories/CVE-2024-48919.md)
  `CVE-2024-48919` · CVE record: getcursor cursor · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2024 · Tags: CWE-20
- [TCC Bypass in Cursor's macOS Application](https://agentprime.io/advisories/CVE-2024-45599.md)
  `CVE-2024-45599` · CVE record: getcursor cursor · CVSS 3.8 Low · Not analysed yet · Published 24 Sept 2024 · Tags: CWE-277

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cursor>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cursor/>. Everything for agents: <https://agentprime.io/llms.txt>.