Login Request a demo
CU
Product
cursor
by cursor · last CVE Aug 11, 2026
29
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities29In the news0Timeline
Severity mix
Critical 10High 17Medium 2Low 0
Severity
All severities29Critical10High17Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add cursor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-26268
9.9
1%
Feb 13
Cursor sandbox escape via Git hooks
Affected: < 2.5
CVE-2026-50548
9.8
1%
Jun 25
Cursor Desktop sandbox escape via agent-controlled working directory
Affected: < 3.0
CVE-2026-50549
9.8
1%
Jun 25
Cursor Desktop sandbox escape via symlink and failed path canonicalization
Affected: < 3.0
CVE-2026-22708
9.8
1%
Jan 14
Cursor has a Terminal Tool Allowlist Bypass via Environment Variables
Affected: < 2.3
CVE-2025-62354
9.8
1%
Nov 26
Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those…
Affected: 1.3.4 before 2.0
CVE-2025-59944
9.8
1%
Oct 3
Cursor IDE: Sensitive File Overwrite Bypass is Possible
Affected: < 1.7
CVE-2025-54130
9.8
0%
Aug 5
Cursor Agent is vulnerable prompt injection via Editor Special Files
Affected: < 1.3.9
CVE-2025-54135
9.8
2%
Aug 5
Cursor Agent is vulnerable to prompt injection via MCP Special Files
Affected: < 1.3.9
CVE-2025-54133
9.6
0%
Aug 1
Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialog
Affected: >= 1.17, < 1.3
CVE-2024-48919
9.2
1%
Oct 22
RCE via Prompt Injection Into Cursor's Terminal Cmd-K
Affected: before 0.42
Showing 10