Cursor sandbox escape via Git hooks

Cursor Desktop sandbox escape via agent-controlled working directory

Cursor Desktop sandbox escape via symlink and failed path canonicalization

Cursor has a Terminal Tool Allowlist Bypass via Environment Variables

Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those…

Cursor IDE: Sensitive File Overwrite Bypass is Possible

Cursor Agent is vulnerable prompt injection via Editor Special Files

Cursor Agent is vulnerable to prompt injection via MCP Special Files

Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialog

RCE via Prompt Injection Into Cursor's Terminal Cmd-K

Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass

Cursor CLI Beta: Command Injection via Untrusted MCP Configuration

Cursor's Sensitive File Modification can Lead to NTFS Path Quirks

Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows

Cursor: Speedbump Modal Bypass in MCP Server Deep-Link

Cursor CLI Agent: Sensitive File Overwrite Bypass

Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config

Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Execution

Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals

Cursor bypasses its allow list to execute arbitrary commands

Cursor Desktop sandbox escape via Claude hook configuration

Cursor: Sandbox escape via launching privileged containers

Cursor: Sandbox escape via tampered Python virtual environments

Cursor: Cloud Agent Browser Sandbox Escape

Cursor: Authentication Bypass Possible via New Cursorignore Write

Cursor is vulnerable to RCE via .code-workspace files using Prompt Injection

Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetch

Cursor: Potential Information Leakage via Mermaid Diagram

TCC Bypass via misconfigured Node fuses in Cursor