Cursor security advisories

33 advisories · 19 critical or high in 12 months · latest Jul 14

33 advisories

Date	Advisory	Severity	Fixed in
Jul 14	Sandbox escape via tampered Python virtual environments HighJul 14 CVE-2026-732173.1.2	High	3.1.2
Jul 14	Sandbox escape via launching privileged containers HighJul 14 CVE-2026-73218No fix yet	High	No fix yet
Jul 6	Cloud Agent Browser Sandbox Escape High7.7Jul 6 CVE-2026-61613Fixedon03/31/2026	High7.7	Fixedon03/31/2026
Jun 5	Cursor Desktop sandbox escape via agent-controlled working directory CriticalJun 5 CVE-2026-505483.0	Critical	3.0
Jun 5	Cursor Desktop sandbox escape via symlink and failed path canonicalization CriticalJun 5 CVE-2026-505493.0	Critical	3.0
May 21	Cursor Desktop sandbox escape via Claude hook configuration High8.5May 21 CVE-2026-481243.0.0	High8.5	3.0.0
Mar 9	Arbitrary Code Execution via Prompt Injection and Whitelist Bypass HighMar 9 CVE-2026-318542.0	High	2.0
Feb 13	Sandbox escape via Git hooks High8.0Feb 13 CVE-2026-262682.5	High8.0	2.5
Jan 14	Terminal Tool Allowlist Bypass via Environment Variables HighJan 14 CVE-2026-227082.3	High	2.3
Nov 32025	Cursorignore Bypass via New Cursorignore Write HighNov 3, 2025 CVE-2025-641102.0	High	2.0
Nov 32025	Command Injection via Untrusted MCP Configuration in Cursor CLI Beta High8.8Nov 3, 2025 CVE-2025-641092025.09.17-25b418f	High8.8	2025.09.17-25b418f
Nov 32025	Speedbump Modal Bypass in Cursor MCP Server Deep-Link High8.8Nov 3, 2025 CVE-2025-641062.0	High8.8	2.0
Nov 32025	Sensitive File Modification - NTFS Path Quirks High8.8Nov 3, 2025 CVE-2025-641082.0	High8.8	2.0
Nov 32025	Sensitive File Protection Bypass - Path Manipulation Using Backslashes on Windows High8.8Nov 3, 2025 CVE-2025-641072.0	High8.8	2.0
Oct 22025	Cursor CLI Agent - Sensitive File Overwrite Bypass High7.1Oct 2, 2025 CVE-2025-615932025.09.17-25b418f	High7.1	2025.09.17-25b418f
Oct 22025	Cursor IDE - Sensitive File Overwrite Bypass High8.0Oct 2, 2025 CVE-2025-599441.7	High8.0	1.7
Oct 22025	Remote Code Execution in Cursor CLI via Cursor Agent MCP OAuth2 Communication High8.8Oct 2, 2025 CVE-2025-615912025.09.17-25b418f	High8.8	2025.09.17-25b418f
Oct 22025	Arbitrary code execution Permissive CLI Config in Cursor CLI High8.8Oct 2, 2025 CVE-2025-615922025.09.17-25b418f	High8.8	2025.09.17-25b418f
Oct 22025	RCE via .code-workspace files using Prompt Injection High7.5Oct 2, 2025 CVE-2025-615901.7	High7.5	1.7
Oct 22025	Potential Information Leakage via Mermaid Diagram Medium5.9Oct 2, 2025 CVE-2025-615891.7	Medium5.9	1.7
Aug 22025	Arbitrary code execution from Cursor Agent through a prompt injection via MCP Special Files High8.5Aug 2, 2025 CVE-2025-541351.3.9	High8.5	1.3.9
Aug 22025	Arbitrary code execution from Cursor Agent through a prompt injection via Editor Special Files High7.5Aug 2, 2025 CVE-2025-541301.3.9	High7.5	1.3.9
Aug 12025	Bypassing allow list to execute an arbitrary command Medium6.4Aug 1, 2025 CVE-2025-541311.3	Medium6.4	1.3
Aug 12025	Arbitrary Image Fetch in Mermaid Diagram Tool Medium4.4Aug 1, 2025 CVE-2025-541321.3	Medium4.4	1.3
Aug 12025	MCP Install Deeplink Did Not Show Arguments on User-Dialog MediumAug 1, 2025 CVE-2025-541331.3	Medium	1.3
Aug 12025	Modification of MCP Server Definitions Bypasses Manual Re-approval High7.2Aug 1, 2025 CVE-2025-541361.3	High7.2	1.3
Jun 192025	IDOR in Usage API Leading to Unauthorized Data Exposure Medium4.3Jun 19, 2025 GHSA-c43p-6fv2-6gr22025-06-17	Medium4.3	2025-06-17
Jun 192025	IDOR in Usage Events API Lets Users Access Teammates' Activity Data Medium4.3Jun 19, 2025 GHSA-rjmc-526x-86532025-06-17	Medium4.3	2025-06-17
Jun 112025	Potential Information Leakage using JSON schema in Cursor Agent Medium5.9Jun 11, 2025 CVE-2025-491500.51.0	Medium5.9	0.51.0
Apr 72025	Arbitrary file write from Cursor Agent through a prompt injection from malicious @Docs High8.0Apr 7, 2025 CVE-2025-320180.48.7+	High8.0	0.48.7+
Nov 272024	Any Team Member Can Access Billing Link LowNov 27, 2024 GHSA-g4ff-54cv-h6f9Allversions	Low	Allversions
Oct 222024	RCE via Prompt Injection Into Cursor's Terminal Cmd-K HighOct 22, 2024 CVE-2024-48919Allversions	High	Allversions
Sep 242024	TCC Bypass in Cursor's macOS Application Low3.8Sep 24, 2024 CVE-2024-455990.41.0	Low3.8	0.41.0

About Cursor

Security advisories Cursor publishes for its own products.

Cursor

Cursor elsewhere on fru.dev: Acquisitions · Funding · Paydays · Releases

Critical advisories by email