cursor

Every one of the 28 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvalsCVE-2025-54136cursor · CVSS 7.2 · 32% likelycovered by CyberSIXT

   CWE-78

2. Cursor Agent is vulnerable to prompt injection via MCP Special FilesCVE-2025-54135cursor · CVSS 8.6 · 2.1% likelycovered by CyberSIXT

   CWE-781 article

3. Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those spe…CVE-2025-62354cursor · CVSS 9.8 · 1.3% likely

   CWE-78

4. Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code ExecutionCVE-2025-61591cursor · CVSS 8.8 · 1.2% likely

   CWE-78

5. Cursor Desktop sandbox escape via symlink and failed path canonicalizationCVE-2026-50549cursor · CVSS 9.3 · 1.0% likelycovered by CyberSIXT

   CWE-59

6. Cursor Desktop sandbox escape via agent-controlled working directoryCVE-2026-50548cursor · CVSS 9.3 · 1.0% likelycovered by CyberSIXT

   CWE-22

7. Cursor has a Terminal Tool Allowlist Bypass via Environment VariablesCVE-2026-22708cursor · CVSS 7.2 · 0.8% likely

   CWE-15

8. Cursor sandbox escape via Git hooksCVE-2026-26268cursor · CVSS 8.1 · 0.7% likelycovered by CyberSIXT

   CWE-862

9. Cursor: Cloud Agent Browser Sandbox EscapeCVE-2026-61613cursor · CVSS 7.7 · 0.7% likely

   CWE-306

10. Cursor: Sandbox escape via launching privileged containersCVE-2026-73218cursor · CVSS 7.7 · 0.6% likely

    CWE-269

11. Cursor bypasses its allow list to execute arbitrary commandsCVE-2025-54131cursor · CVSS 6.4 · 0.5% likely

    CWE-77

12. Cursor is vulnerable to RCE via .code-workspace files using Prompt InjectionCVE-2025-61590cursor · CVSS 7.5 · 0.5% likely

    CWE-94

13. Cursor CLI Beta: Command Injection via Untrusted MCP ConfigurationCVE-2025-64109cursor · CVSS 8.8 · 0.5% likely

    CWE-78

14. Cursor IDE: Sensitive File Overwrite Bypass is PossibleCVE-2025-59944cursor · CVSS 8.1 · 0.5% likely

    CWE-178

15. Cursor's Sensitive File Modification can Lead to NTFS Path QuirksCVE-2025-64108cursor · CVSS 8.8 · 0.5% likely

    CWE-22

16. Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI ConfigCVE-2025-61592cursor · CVSS 8.8 · 0.5% likely

    CWE-829

17. Cursor's MCP Install Deeplink Does Not Show Arguments in its User-DialogCVE-2025-54133cursor · CVSS 5.3 · 0.4% likely

    CWE-78

18. Cursor: Speedbump Modal Bypass in MCP Server Deep-LinkCVE-2025-64106cursor · CVSS 8.8 · 0.4% likely

    CWE-78

19. Cursor: Sandbox escape via tampered Python virtual environmentsCVE-2026-73217cursor · CVSS 7.7 · 0.4% likely

    CWE-693

20. Cursor CLI Agent: Sensitive File Overwrite BypassCVE-2025-61593cursor · CVSS 7.1 · 0.4% likely

    CWE-178

21. Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image FetchCVE-2025-54132cursor · CVSS 4.4 · 0.4% likely

    CWE-918

22. Cursor: Authentication Bypass Possible via New Cursorignore WriteCVE-2025-64110cursor · CVSS 8.7 · 0.4% likely

    CWE-284

23. Cursor is Vulnerable to Path Manipulation Using Backslashes on WindowsCVE-2025-64107cursor · CVSS 8.8 · 0.4% likely

    CWE-22

24. Cursor Agent is vulnerable prompt injection via Editor Special FilesCVE-2025-54130cursor · CVSS 7.5 · 0.4% likely

    CWE-285

25. Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist BypassCVE-2026-31854cursor · CVSS 8.7 · 0.4% likely

    CWE-78

26. Cursor: Potential Information Leakage via Mermaid DiagramCVE-2025-61589cursor · CVSS 5.9 · 0.3% likely

    CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.