Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how anysphere compares to other vendors in security performance

View Risk Score →

Cursor Cursor DesktopCursor Desktop sandbox escape via agent-controlled working directory

Risk 89
Severity
9.3
First published (updated )
CVE-2026-50548

Cursor Cursor DesktopCursor Desktop sandbox escape via symlink and failed path canonicalization

Risk 89
Severity
9.3
First published (updated )
CVE-2026-50549

Cursor CursorCursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass

Risk 56
Severity
8.7
EPSS
0.06%
First published (updated )
CVE-2026-31854

Cursor CursorCursor sandbox escape via Git hooks

Risk 59
Severity
9.9
EPSS
0.04%
First published (updated )
CVE-2026-26268

Cursor CursorCursor has a Terminal Tool Allowlist Bypass via Environment Variables

Risk 61
Severity
9.8
EPSS
0.06%
First published (updated )
CVE-2026-22708
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cursor CursorCursor: Authentication Bypass Possible via New Cursorignore Write

Risk 47
Severity
8.7
First published (updated )
CVE-2025-64110

Cursor CursorCursor's Sensitive File Modification can Lead to NTFS Path Quirks

Risk 79
Severity
8.8
First published (updated )
CVE-2025-64108

Cursor CursorCursor is Vulnerable to Path Manipulation Using Backslashes on Windows

Risk 79
Severity
8.8
First published (updated )
CVE-2025-64107

Cursor CursorCursor: Speedbump Modal Bypass in MCP Server Deep-Link

Risk 77
Severity
8.8
First published (updated )
CVE-2025-64106

Cursor Cursor IDECursor IDE: Sensitive File Overwrite Bypass is Possible

Risk 86
Severity
9.8
First published (updated )
CVE-2025-59944
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cursor Cursor CLI AgentCursor CLI Agent: Sensitive File Overwrite Bypass

Risk 77
Severity
8.8
First published (updated )
CVE-2025-61593

Cursor Cursor CLICursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config

Risk 77
Severity
8.8
First published (updated )
CVE-2025-61592

Cursor Cursor AgentCursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Execution

Risk 77
Severity
8.8
First published (updated )
CVE-2025-61591

Cursor CursorCursor is vulnerable to RCE via .code-workspace files using Prompt Injection

Risk 70
Severity
7.5
First published (updated )
CVE-2025-61590

Cursor CursorCursor: Potential Information Leakage via Mermaid Diagram

Risk 35
Severity
5.9
First published (updated )
CVE-2025-61589
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cursor CursorCursor Agent is vulnerable prompt injection via Editor Special Files

Risk 86
Severity
9.8
First published (updated )
CVE-2025-54130

Cursor CursorCursor Agent is vulnerable to prompt injection via MCP Special Files

Risk 89
Severity
9.8
First published (updated )
CVE-2025-54135

Cursor CursorCursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals

Risk 82
Severity
8.8
First published (updated )
CVE-2025-54136

Cursor CursorCursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialog

Risk 80
Severity
9.6
First published (updated )
CVE-2025-54133

Cursor CursorCursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetch

Risk 43
Severity
7.5
First published (updated )
CVE-2025-54132
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cursor CursorCursor bypasses its allow list to execute arbitrary commands

Risk 79
Severity
8.8
First published (updated )
CVE-2025-54131

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203