Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how cursor compares to other vendors in security performance

View Risk Score →

Cursor Cursor for WindowsCursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace

Risk 77
Severity
8.7
First published (updated )
CVE-2026-63093

Cursor Cursor DesktopCursor Desktop sandbox escape via agent-controlled working directory

Risk 89
Severity
9.3
First published (updated )
CVE-2026-50548

Cursor Cursor DesktopCursor Desktop sandbox escape via symlink and failed path canonicalization

Risk 89
Severity
9.3
First published (updated )
CVE-2026-50549

Cursor Cursor DesktopCursor Desktop sandbox escape via Claude hook configuration

Risk 72
Severity
8.5
First published (updated )
CVE-2026-48124

BleepingComputerMicrosoft Exchange, Windows 11 hacked on second day of Pwn2Own

Exploited
Zeroday
First published (updated )
News
BleepingComputer
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cursor CursorCursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass

Risk 56
Severity
8.7
EPSS
0.06%
First published (updated )
CVE-2026-31854

Cursor CursorCursor sandbox escape via Git hooks

Risk 59
Severity
9.9
EPSS
0.04%
First published (updated )
CVE-2026-26268

Cursor CursorCursor has a Terminal Tool Allowlist Bypass via Environment Variables

Risk 61
Severity
9.8
EPSS
0.06%
First published (updated )
CVE-2026-22708

Cursor CursorCursor: Authentication Bypass Possible via New Cursorignore Write

Risk 47
Severity
8.7
First published (updated )
CVE-2025-64110
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cursor Cursor CLI BetaCursor CLI Beta: Command Injection via Untrusted MCP Configuration

Risk 77
Severity
8.8
First published (updated )
CVE-2025-64109

Cursor CursorCursor's Sensitive File Modification can Lead to NTFS Path Quirks

Risk 79
Severity
8.8
First published (updated )
CVE-2025-64108

Cursor CursorCursor is Vulnerable to Path Manipulation Using Backslashes on Windows

Risk 79
Severity
8.8
First published (updated )
CVE-2025-64107

Cursor CursorCursor: Speedbump Modal Bypass in MCP Server Deep-Link

Risk 77
Severity
8.8
First published (updated )
CVE-2025-64106

BleepingComputerCursor, Windsurf IDEs riddled with 94+ n-day Chromium vulnerabilities

First published (updated )
News
BleepingComputer
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

BleepingComputerMalicious crypto-stealing VSCode extensions resurface on OpenVSX

First published (updated )
News
BleepingComputer

Cursor Cursor IDECursor IDE: Sensitive File Overwrite Bypass is Possible

Risk 86
Severity
9.8
First published (updated )
CVE-2025-59944

Cursor Cursor CLI AgentCursor CLI Agent: Sensitive File Overwrite Bypass

Risk 77
Severity
8.8
First published (updated )
CVE-2025-61593

Cursor Cursor CLICursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config

Risk 77
Severity
8.8
First published (updated )
CVE-2025-61592

Cursor Cursor AgentCursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Execution

Risk 77
Severity
8.8
First published (updated )
CVE-2025-61591
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cursor CursorCursor is vulnerable to RCE via .code-workspace files using Prompt Injection

Risk 70
Severity
7.5
First published (updated )
CVE-2025-61590

Cursor CursorCursor: Potential Information Leakage via Mermaid Diagram

Risk 35
Severity
5.9
First published (updated )
CVE-2025-61589

BleepingComputer'WhiteCobra' floods VSCode market with crypto-stealing extensions

Exploited
First published (updated )
News
BleepingComputer

ZDNetThis 'critical' Cursor security flaw could expose your code to malware - how to fix it

First published (updated )
News
ZDNet

BleepingComputerCursor AI editor lets repos “autorun” malicious code on devices

First published (updated )
News
BleepingComputer
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cursor CursorTCC Bypass via misconfigured Node fuses in Cursor

Risk 22
Severity
4.8
EPSS
0.02%
First published (updated )
CVE-2025-9190

The RegisterVibe coding tool Cursor's MCP implementation allows persistent code execution

First published (updated )
News
The Register

Cursor CursorCursor Agent is vulnerable prompt injection via Editor Special Files

Risk 86
Severity
9.8
First published (updated )
CVE-2025-54130

Cursor CursorCursor Agent is vulnerable to prompt injection via MCP Special Files

Risk 89
Severity
9.8
First published (updated )
CVE-2025-54135

Cursor CursorCursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals

Risk 82
Severity
8.8
First published (updated )
CVE-2025-54136
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203