Read the docs

cursor

Records29All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

cursor records in CISA KEV

No cursor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cursor 22 records HIGH

Records

29 records

TI-2026-45043 CVE-2026-63093 · GHSA-prfr-jc65-hr23

Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace

Priority HIGH 73

Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00847 Published 2026-07-17 No fix listed CWE-426
TI-2025-38624 CVE-2025-62354 · GHSA-fjwj-7prc-9qgm

OS command injection in cursor

Priority MEDIUM 52

Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arb…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01341 Published 2025-11-26 Fixed in 2.0 CWE-78
TI-2026-21238 CVE-2026-26268

Cursor sandbox escape via Git hooks

Priority MEDIUM 44

Cursor is a code editor built for programming with AI.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.007 Published 2026-02-13 Fixed in 2.5 CWE-862
Load more
Open these records in search →