Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

29 records

Vendor: cursor Clear all filters
TI-2026-45043 CVE-2026-63093 · GHSA-prfr-jc65-hr23

Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace

Priority HIGH 73

Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00847 Published 2026-07-17 No fix listed CWE-426
TI-2026-21238 CVE-2026-26268

Cursor sandbox escape via Git hooks

Priority MEDIUM 44

Cursor is a code editor built for programming with AI.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.007 Published 2026-02-13 Fixed in 2.5 CWE-862
TI-2025-38624 CVE-2025-62354 · GHSA-fjwj-7prc-9qgm

OS command injection in cursor

Priority MEDIUM 52

Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arb…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01341 Published 2025-11-26 Fixed in 2.0 CWE-78
TI-2025-08427 CVE-2025-9190 · GHSA-4hgf-jjp9-hfq5

TCC Bypass via misconfigured Node fuses in Cursor

Priority LOW 21

The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Cursor TCC (Transparency, Consent, and Control) pe…

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00145 Published 2025-08-26 No fix listed CWE-276
Load more