agentprime: cursor

agentprime: cursorEvery new CVE for cursor.https://agentprime.io/CVE-2026-73218: Cursor: Sandbox escape via launching privileged containershttps://agentprime.io/advisories/CVE-2026-73218/https://agentprime.io/advisories/CVE-2026-73218/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 17:47:29 GMTCVECVE-2026-73217: Cursor: Sandbox escape via tampered Python virtual environmentshttps://agentprime.io/advisories/CVE-2026-73217/https://agentprime.io/advisories/CVE-2026-73217/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 17:46:16 GMTCVECVE-2026-61613: Cursor: Cloud Agent Browser Sandbox Escapehttps://agentprime.io/advisories/CVE-2026-61613/https://agentprime.io/advisories/CVE-2026-61613/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 14:18:23 GMTCVECVE-2026-50548: Cursor Desktop sandbox escape via agent-controlled working directoryhttps://agentprime.io/advisories/CVE-2026-50548/https://agentprime.io/advisories/CVE-2026-50548/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 18:47:56 GMTCVEcriticalCVE-2026-50549: Cursor Desktop sandbox escape via symlink and failed path canonicalizationhttps://agentprime.io/advisories/CVE-2026-50549/https://agentprime.io/advisories/CVE-2026-50549/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 18:47:45 GMTCVEcriticalCVE-2026-48124: Cursor Desktop sandbox escape via Claude hook configurationhttps://agentprime.io/advisories/CVE-2026-48124/https://agentprime.io/advisories/CVE-2026-48124/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 19:56:07 GMTCVECVE-2026-31854: Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypasshttps://agentprime.io/advisories/CVE-2026-31854/https://agentprime.io/advisories/CVE-2026-31854/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 17:11:52 GMTCVECVE-2026-26268: Cursor sandbox escape via Git hookshttps://agentprime.io/advisories/CVE-2026-26268/https://agentprime.io/advisories/CVE-2026-26268/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Feb 2026 16:54:04 GMTCVECVE-2026-22708: Cursor has a Terminal Tool Allowlist Bypass via Environment Variableshttps://agentprime.io/advisories/CVE-2026-22708/https://agentprime.io/advisories/CVE-2026-22708/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Jan 2026 16:43:54 GMTCVECVE-2025-62354: OS command injection in cursorhttps://agentprime.io/advisories/CVE-2025-62354/https://agentprime.io/advisories/CVE-2025-62354/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Nov 2025 15:40:24 GMTCVEcriticalCVE-2025-64110: Cursor: Authentication Bypass Possible via New Cursorignore Writehttps://agentprime.io/advisories/CVE-2025-64110/https://agentprime.io/advisories/CVE-2025-64110/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 23:24:46 GMTCVECVE-2025-64109: Cursor CLI Beta: Command Injection via Untrusted MCP Configurationhttps://agentprime.io/advisories/CVE-2025-64109/https://agentprime.io/advisories/CVE-2025-64109/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 23:09:49 GMTCVECVE-2025-64108: Cursor's Sensitive File Modification can Lead to NTFS Path Quirkshttps://agentprime.io/advisories/CVE-2025-64108/https://agentprime.io/advisories/CVE-2025-64108/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 22:58:53 GMTCVECVE-2025-64107: Cursor is Vulnerable to Path Manipulation Using Backslashes on Windowshttps://agentprime.io/advisories/CVE-2025-64107/https://agentprime.io/advisories/CVE-2025-64107/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 22:51:42 GMTCVECVE-2025-64106: Cursor: Speedbump Modal Bypass in MCP Server Deep-Linkhttps://agentprime.io/advisories/CVE-2025-64106/https://agentprime.io/advisories/CVE-2025-64106/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 22:48:14 GMTCVECVE-2025-59944: Cursor IDE: Sensitive File Overwrite Bypass is Possiblehttps://agentprime.io/advisories/CVE-2025-59944/https://agentprime.io/advisories/CVE-2025-59944/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Oct 2025 20:15:30 GMTCVECVE-2025-61593: Cursor CLI Agent: Sensitive File Overwrite Bypasshttps://agentprime.io/advisories/CVE-2025-61593/https://agentprime.io/advisories/CVE-2025-61593/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Oct 2025 17:28:03 GMTCVECVE-2025-61592: Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Confighttps://agentprime.io/advisories/CVE-2025-61592/https://agentprime.io/advisories/CVE-2025-61592/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Oct 2025 17:23:37 GMTCVECVE-2025-61591: Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Executionhttps://agentprime.io/advisories/CVE-2025-61591/https://agentprime.io/advisories/CVE-2025-61591/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Oct 2025 16:44:54 GMTCVECVE-2025-61590: Cursor is vulnerable to RCE via .code-workspace files using Prompt Injectionhttps://agentprime.io/advisories/CVE-2025-61590/https://agentprime.io/advisories/CVE-2025-61590/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Oct 2025 16:27:34 GMTCVECVE-2025-61589: Cursor: Potential Information Leakage via Mermaid Diagramhttps://agentprime.io/advisories/CVE-2025-61589/https://agentprime.io/advisories/CVE-2025-61589/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Oct 2025 06:48:30 GMTCVECVE-2025-9190: TCC Bypass via misconfigured Node fuses in Cursorhttps://agentprime.io/advisories/CVE-2025-9190/https://agentprime.io/advisories/CVE-2025-9190/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Aug 2025 12:22:59 GMTCVECVE-2025-54130: Cursor Agent is vulnerable prompt injection via Editor Special Fileshttps://agentprime.io/advisories/CVE-2025-54130/https://agentprime.io/advisories/CVE-2025-54130/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Aug 2025 00:12:28 GMTCVECVE-2025-54135: Cursor Agent is vulnerable to prompt injection via MCP Special Fileshttps://agentprime.io/advisories/CVE-2025-54135/https://agentprime.io/advisories/CVE-2025-54135/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Aug 2025 00:11:07 GMTCVECVE-2025-54136: Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvalshttps://agentprime.io/advisories/CVE-2025-54136/https://agentprime.io/advisories/CVE-2025-54136/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.32 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 Aug 2025 23:08:21 GMTCVEcriticalCVE-2025-54133: Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialoghttps://agentprime.io/advisories/CVE-2025-54133/https://agentprime.io/advisories/CVE-2025-54133/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 Aug 2025 23:07:00 GMTCVECVE-2025-54132: Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetchhttps://agentprime.io/advisories/CVE-2025-54132/https://agentprime.io/advisories/CVE-2025-54132/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 Aug 2025 23:05:17 GMTCVECVE-2025-54131: Cursor bypasses its allow list to execute arbitrary commandshttps://agentprime.io/advisories/CVE-2025-54131/https://agentprime.io/advisories/CVE-2025-54131/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 Aug 2025 23:05:02 GMTCVECVE-2025-49150: Cursor Agent Potentially Leaks Information using JSON schemahttps://agentprime.io/advisories/CVE-2025-49150/https://agentprime.io/advisories/CVE-2025-49150/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Jun 2025 17:49:43 GMTCVECVE-2025-32018: Arbitrary file write from Cursor Agent through a prompt injection from malicious @Docshttps://agentprime.io/advisories/CVE-2025-32018/https://agentprime.io/advisories/CVE-2025-32018/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 15:49:19 GMTCVECVE-2024-48919: RCE via Prompt Injection Into Cursor's Terminal Cmd-Khttps://agentprime.io/advisories/CVE-2024-48919/https://agentprime.io/advisories/CVE-2024-48919/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Oct 2024 20:58:21 GMTCVEcriticalCVE-2024-45599: TCC Bypass in Cursor's macOS Applicationhttps://agentprime.io/advisories/CVE-2024-45599/https://agentprime.io/advisories/CVE-2024-45599/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Sep 2024 18:02:18 GMTCVE