Product by Anysphere
Anysphere Cursor
22 known vulnerabilities in Anysphere Cursor (Anysphere), 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-54136 | Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals | 7.2 | |
| Critical | CVE-2025-54135 | Cursor Agent is vulnerable to prompt injection via MCP Special Files | 8.6 | |
| Critical | CVE-2026-50548 | Cursor Desktop sandbox escape via agent-controlled working directory | 9.8 | |
| Critical | CVE-2026-50549 | Cursor Desktop sandbox escape via symlink and failed path canonicalization | 9.8 | |
| High | CVE-2026-63093 | Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace | 8.8 | |
| High | CVE-2025-61591 | Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Execution | 8.8 | |
| Critical | CVE-2026-22708 | Cursor has a Terminal Tool Allowlist Bypass via Environment Variables | 9.8 | |
| Critical | CVE-2026-26268 | Cursor sandbox escape via Git hooks | 8.1 | |
| High | CVE-2025-64108 | Cursor's Sensitive File Modification can Lead to NTFS Path Quirks | 8.8 | |
| Critical | CVE-2025-54133 | Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialog | 9.6 | |
| High | CVE-2025-61592 | Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config | 8.8 | |
| Critical | CVE-2025-59944 | Cursor IDE: Sensitive File Overwrite Bypass is Possible | 8.1 | |
| High | CVE-2026-31854 | Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass | 8.8 | |
| High | CVE-2025-64106 | Cursor: Speedbump Modal Bypass in MCP Server Deep-Link | 8.8 | |
| High | CVE-2025-61590 | Cursor is vulnerable to RCE via .code-workspace files using Prompt Injection | 7.5 | |
| High | CVE-2025-64107 | Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows | 8.8 | |
| High | CVE-2025-64110 | Cursor: Authentication Bypass Possible via New Cursorignore Write | 7.5 | |
| High | CVE-2025-54131 | Cursor bypasses its allow list to execute arbitrary commands | 6.4 | |
| High | CVE-2025-61593 | Cursor CLI Agent: Sensitive File Overwrite Bypass | 7.1 | |
| Critical | CVE-2025-54130 | Cursor Agent is vulnerable prompt injection via Editor Special Files | 7.5 | |
| Medium | CVE-2025-61589 | Cursor: Potential Information Leakage via Mermaid Diagram | 5.9 | |
| High | CVE-2025-54132 | Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetch | 4.4 |