cursor vulnerabilities

CVEs per yearBy the year they were published

1. 202519
2. 20269

Newest CVEs

• CVE-2026-73218

  Cursor: Sandbox escape via launching privileged containers

  cursor · cursor

  High7.7
• CVE-2026-73217

  Cursor: Sandbox escape via tampered Python virtual environments

  cursor · cursor

  High7.7
• CVE-2026-61613

  Cursor: Cloud Agent Browser Sandbox Escape

  cursor · cursor

  High7.7
• CVE-2026-50548

  Cursor Desktop sandbox escape via agent-controlled working directory

  cursor · cursor

  Critical9.3
• CVE-2026-50549

  Cursor Desktop sandbox escape via symlink and failed path canonicalization

  cursor · cursor

  Critical9.3
• CVE-2026-48124

  Cursor Desktop sandbox escape via Claude hook configuration

  cursor · cursor

  High8.5
• CVE-2026-31854

  Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass

  cursor · cursor

  High8.7
• CVE-2026-26268

  Cursor sandbox escape via Git hooks

  cursor · cursor

  High8.1
• CVE-2026-22708

  Cursor has a Terminal Tool Allowlist Bypass via Environment Variables

  cursor · cursor

  High7.2
• CVE-2025-62354

  Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are…

  cursor · cursor

  Critical9.8