Anysphere
Anysphere Cursor: vulnerabilidades y CVE
Anysphere Cursor tiene 34 vulnerabilidades publicadas, 22 de ellas en los últimos 12 meses. 9 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE34
Últimos 12 meses22
Críticas9
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-73218 | Alta (7.7) | 0.63% | — | 11 ago 2026 | Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode, when Docker Desktop and the Dev Containers CLI are installed, to launch a… |
| CVE-2026-73217 | Alta (7.7) | 0.43% | — | 11 ago 2026 | Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Python executable with a malicious wrapper… |
| CVE-2026-63093 | Alta (8.7) | 0.85% | — | 17 jul 2026 | Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a… |
| CVE-2026-61613 | Alta (7.7) | 0.68% | — | 15 jul 2026 | Cursor is a code editor built for programming with AI. Prior to the Cloud Agent fix on 03/31/2026, browser-enabled Cursor Cloud Agent sessions allowed attacker-controlled web content to connect from inside the agent… |
| CVE-2026-50549 | Crítica (9.3) | 1.0% | — | 25 jun 2026 | Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default. Before a Write, the agent canonicalizes the target path to confirm it stays inside the… |
| CVE-2026-50548 | Crítica (9.3) | 1.0% | — | 25 jun 2026 | Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default, and the sandbox grants write access to the command's working directory. A flaw was… |
| CVE-2026-48124 | Alta (8.5) | 0.19% | — | 15 jun 2026 | Cursor is a code editor built for programming with AI. In versions prior to 3.0.0, the Cursor Desktop could execute workspace-defined Claude hook commands from .claude/settings.local.json without dedicated user… |
| CVE-2026-31854 | Alta (8.7) | 0.45% | — | 11 mar 2026 | Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously crafted instructions, the model may attempt to follow them in order to “assist” the user. When combined with… |
| CVE-2026-26268 | Crítica (9.9) | 0.42% | — | 13 feb 2026 | Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicious agent (ie prompt injection) could write to improperly protected… |
| CVE-2026-22708 | Alta (7.2) | 0.80% | — | 14 ene 2026 | Cursor is a code editor built for programming with AI. Prior to 2.3, hen the Cursor Agent is running in Auto-Run Mode with Allowlist mode enabled, certain shell built-ins can still be executed without appearing in the… |
| CVE-2025-62354 | Crítica (9.8) | 1.4% | — | 26 nov 2025 | Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in… |
| CVE-2025-64110 | Alta (8.7) | 0.36% | — | 5 nov 2025 | Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a malicious agent to read sensitive files that should be protected via cursorignore. An attacker who has already… |
| CVE-2025-64109 | Alta (8.8) | 0.48% | — | 5 nov 2025 | Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP (Model Context Protocol) server… |
| CVE-2025-64108 | Alta (8.8) | 0.45% | — | 4 nov 2025 | Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a prompt injection attacker to circumvent sensitive file protections and overwrite files which Cursor… |
| CVE-2025-64107 | Alta (8.8) | 0.36% | — | 4 nov 2025 | Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings may lead to RCE. Cursor detects path manipulation via forward slashes (./.cursor/./././././mcp.json… |
| CVE-2025-64106 | Alta (8.8) | 0.37% | — | 4 nov 2025 | Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor's MCP server installation enables specially crafted deep-links to bypass the standard security… |
| CVE-2025-59944 | Crítica (9.8) | 0.41% | — | 3 oct 2025 | Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files (e.g., */.cursor/mcp.json), which allows attackers to… |
| CVE-2025-61593 | Alta (8.8) | 0.41% | — | 3 oct 2025 | Cursor is a code editor built for programming with AI. In versions 1.7 and below, a vulnerability in the way Cursor CLI Agent protects its sensitive files (i.e. */.cursor/cli.json) allows attackers to modify the content… |
| CVE-2025-61592 | Alta (8.8) | 0.46% | — | 3 oct 2025 | Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific CLI configuration from the current working directory (<project>/.cursor/cli.json) could override… |
| CVE-2025-61591 | Alta (8.8) | 1.2% | — | 3 oct 2025 | Cursor is a code editor built for programming with AI. In versions 1.7 and below, when MCP uses OAuth authentication with an untrusted MCP server, an attacker can impersonate a malicious MCP server and return crafted,… |
| CVE-2025-61590 | Alta (7.5) | 0.52% | — | 3 oct 2025 | Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution (RCE) attacks through Visual Studio Code Workspaces. Workspaces allow users to open more than a… |
| CVE-2025-61589 | Media (5.9) | 0.29% | — | 3 oct 2025 | Cursor is a code editor built for programming with AI. In versions 1.6 and below, Mermaid (a to render diagrams) allows embedding images which then get rendered by Cursor in the chat box. An attacker can use this to… |
| CVE-2025-9190 | Media (4.8) | 0.16% | — | 26 ago 2025 | The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Cursor TCC (Transparency, Consent, and Control)… |
| CVE-2025-54135 | Crítica (9.8) | 1.8% | — | 5 ago 2025 | Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions below 1.3.9, If the file is a dotfile, editing it requires approval but creating a new… |
| CVE-2025-54130 | Crítica (9.8) | 0.30% | — | 5 ago 2025 | Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions less than 1.3.9. If the file is a dotfile, editing it requires approval but creating a… |
| CVE-2025-54136 | Alta (8.8) | 26% | — | 2 ago 2025 | Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by modifying an already trusted MCP configuration file inside a shared… |
| CVE-2025-54133 | Media (5.3) | 0.37% | — | 2 ago 2025 | Cursor is a code editor built for programming with AI. In versions 1.17 through 1.2, there is a UI information disclosure vulnerability in Cursor's MCP (Model Context Protocol) deeplink handler, allowing attackers to… |
| CVE-2025-54132 | Alta (7.5) | 0.35% | — | 1 ago 2025 | Cursor is a code editor built for programming with AI. In versions below 1.3, Mermaid (which is used to render diagrams) allows embedding images which then get rendered by Cursor in the chat box. An attacker can use… |
| CVE-2025-54131 | Alta (8.8) | 0.48% | — | 1 ago 2025 | Cursor is a code editor built for programming with AI. In versions below 1.3, an attacker can bypass the allow list in auto-run mode with a backtick (`) or $(cmd). If a user has swapped Cursor from its default settings… |
| CVE-2025-49150 | Media (5.9) | 0.38% | — | 11 jun 2025 | Cursor is a code editor built for programming with AI. Prior to 0.51.0, by default, the setting json.schemaDownload.enable was set to True. This means that by writing a JSON file, an attacker can trigger an arbitrary… |