CVE-2026-31854: Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass
Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously crafted instructions, the model may attempt to follow them in order to “assist” the user. When combined with a bypass of the command whitelist mechanism, such indirect prompt injections could result in commands being executed automatically, without the user’s explicit intent, thereby posing a significant security risk. This vulnerability is fixed in 2.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31854?
CVE-2026-31854 has been classified with a high severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2026-31854?
To fix CVE-2026-31854, users should upgrade to Cursor version 2.0 or higher, which addresses the vulnerability.
What does CVE-2026-31854 affect?
CVE-2026-31854 affects Cursor code editor versions prior to 2.0, allowing for vulnerabilities related to prompt injection and whitelist bypass.
Can CVE-2026-31854 lead to data breaches?
Yes, CVE-2026-31854 can potentially lead to data breaches due to arbitrary code execution capabilities.
Who is responsible for the CVE-2026-31854 vulnerability?
The CVE-2026-31854 vulnerability is associated with the Cursor software developed by Cursor.