AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Cursor security advisories

33 advisories · 9 critical or high in 12 months · latest Jul 14

33 advisories

HighJul 14Sandbox escape via tampered Python virtual environmentsCVE-2026-73217fixed in 3.1.2HighJul 14Sandbox escape via launching privileged containersCVE-2026-73218no fix yetHigh 7.7Jul 6Cloud Agent Browser Sandbox EscapeCVE-2026-61613fixed in Fixedon03/31/2026CriticalJun 5Cursor Desktop sandbox escape via agent-controlled working directoryCVE-2026-50548fixed in 3.0CriticalJun 5Cursor Desktop sandbox escape via symlink and failed path canonicalizationCVE-2026-50549fixed in 3.0High 8.5May 21Cursor Desktop sandbox escape via Claude hook configurationCVE-2026-48124fixed in 3.0.0HighMar 9Arbitrary Code Execution via Prompt Injection and Whitelist BypassCVE-2026-31854fixed in 2.0High 8.0Feb 13Sandbox escape via Git hooksCVE-2026-26268fixed in 2.5HighJan 14Terminal Tool Allowlist Bypass via Environment VariablesCVE-2026-22708fixed in 2.3HighNov 3, 2025Cursorignore Bypass via New Cursorignore WriteCVE-2025-64110fixed in 2.0High 8.8Nov 3, 2025Command Injection via Untrusted MCP Configuration in Cursor CLI BetaCVE-2025-64109fixed in 2025.09.17-25b418fHigh 8.8Nov 3, 2025Speedbump Modal Bypass in Cursor MCP Server Deep-LinkCVE-2025-64106fixed in 2.0High 8.8Nov 3, 2025Sensitive File Modification - NTFS Path QuirksCVE-2025-64108fixed in 2.0High 8.8Nov 3, 2025Sensitive File Protection Bypass - Path Manipulation Using Backslashes on WindowsCVE-2025-64107fixed in 2.0High 7.1Oct 2, 2025Cursor CLI Agent - Sensitive File Overwrite BypassCVE-2025-61593fixed in 2025.09.17-25b418fHigh 8.0Oct 2, 2025Cursor IDE - Sensitive File Overwrite BypassCVE-2025-59944fixed in 1.7High 8.8Oct 2, 2025Remote Code Execution in Cursor CLI via Cursor Agent MCP OAuth2 CommunicationCVE-2025-61591fixed in 2025.09.17-25b418fHigh 8.8Oct 2, 2025Arbitrary code execution Permissive CLI Config in Cursor CLICVE-2025-61592fixed in 2025.09.17-25b418fHigh 7.5Oct 2, 2025RCE via .code-workspace files using Prompt InjectionCVE-2025-61590fixed in 1.7Medium 5.9Oct 2, 2025Potential Information Leakage via Mermaid DiagramCVE-2025-61589fixed in 1.7High 8.5Aug 2, 2025Arbitrary code execution from Cursor Agent through a prompt injection via MCP Special FilesCVE-2025-54135fixed in 1.3.9High 7.5Aug 2, 2025Arbitrary code execution from Cursor Agent through a prompt injection via Editor Special FilesCVE-2025-54130fixed in 1.3.9Medium 6.4Aug 1, 2025Bypassing allow list to execute an arbitrary commandCVE-2025-54131fixed in 1.3Medium 4.4Aug 1, 2025Arbitrary Image Fetch in Mermaid Diagram ToolCVE-2025-54132fixed in 1.3MediumAug 1, 2025MCP Install Deeplink Did Not Show Arguments on User-DialogCVE-2025-54133fixed in 1.3High 7.2Aug 1, 2025Modification of MCP Server Definitions Bypasses Manual Re-approvalCVE-2025-54136fixed in 1.3Medium 4.3Jun 19, 2025IDOR in Usage API Leading to Unauthorized Data ExposureGHSA-c43p-6fv2-6gr2fixed in 2025-06-17Medium 4.3Jun 19, 2025IDOR in Usage Events API Lets Users Access Teammates' Activity DataGHSA-rjmc-526x-8653fixed in 2025-06-17Medium 5.9Jun 11, 2025Potential Information Leakage using JSON schema in Cursor AgentCVE-2025-49150fixed in 0.51.0High 8.0Apr 7, 2025Arbitrary file write from Cursor Agent through a prompt injection from malicious @DocsCVE-2025-32018fixed in 0.48.7+LowNov 27, 2024Any Team Member Can Access Billing LinkGHSA-g4ff-54cv-h6f9fixed in AllversionsHighOct 22, 2024RCE via Prompt Injection Into Cursor's Terminal Cmd-KCVE-2024-48919fixed in AllversionsLow 3.8Sep 24, 2024TCC Bypass in Cursor's macOS ApplicationCVE-2024-45599fixed in 0.41.0
About Cursor

Security advisories Cursor publishes for its own products.

Cursor

Cursor elsewhere on Ibis: Acquisitions · Funding · Paydays · Releases · Repos