Skip to content
OpenAdvisories

Vendor

cursor

28 known vulnerabilities.

Products

cursor 28
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-26268 Public exploit

    Cursor sandbox escape via Git hooks

    Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicious agent (ie prompt injection) could write to improperly protected .git settings, including git hooks, which m…

    cursor cursor
  • High 8.6
    CVE-2025-54135 Public exploit

    Cursor Agent is vulnerable to prompt injection via MCP Special Files

    Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions below 1.3.9, If the file is a dotfile, editing it requires approval but creating a new one doesn't. Hence, if sensitive MCP files…

    cursor cursor
  • High 7.2
    CVE-2025-54136 Public exploit EPSS 32%

    Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals

    Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by modifying an already trusted MCP configuration file inside a shared GitHub repository or editing the file locally…

    cursor cursor