Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass

Cursor CLI Beta: Command Injection via Untrusted MCP Configuration

Cursor's Sensitive File Modification can Lead to NTFS Path Quirks

Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows

Cursor: Speedbump Modal Bypass in MCP Server Deep-Link

Cursor CLI Agent: Sensitive File Overwrite Bypass

Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config

Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Execution

Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals

Cursor bypasses its allow list to execute arbitrary commands

Cursor Desktop sandbox escape via Claude hook configuration

Cursor: Sandbox escape via launching privileged containers

Cursor: Sandbox escape via tampered Python virtual environments

Cursor: Cloud Agent Browser Sandbox Escape

Cursor: Authentication Bypass Possible via New Cursorignore Write

Cursor is vulnerable to RCE via .code-workspace files using Prompt Injection

Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetch