anysphere records
22 published records for vendor anysphere.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 13
- With a fix record
- 77.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-284 Improper Access Control1
- CWE-285 Improper Authorization1
- CWE-426 Untrusted Search Path1
The weakness classes this vendor ships most often: where to look.
CWEAll records
22 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
44Plan | CVE-2025-54136Proof of concept | Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvalsanysphere · cursor · CWE-78 | High8.8 | — | 31.5% | Aug 1, 2025 |
40Plan | CVE-2025-54135Proof of concept | Cursor Agent is vulnerable to prompt injection via MCP Special Filesanysphere · cursor · CWE-78 | Critical9.8 | — | 2.1% | Aug 4, 2025 |
39Monitor | CVE-2026-26268Proof of concept | Cursor sandbox escape via Git hooksanysphere · cursor · CWE-862 | Critical9.9 | — | 0.7% | Feb 13, 2026 |
39Monitor | CVE-2025-59944No exploit | Cursor IDE: Sensitive File Overwrite Bypass is Possibleanysphere · cursor · CWE-178 | Critical9.8 | — | 0.5% | Oct 3, 2025 |
39Monitor | CVE-2025-54130No exploit | Cursor Agent is vulnerable prompt injection via Editor Special Filesanysphere · cursor · CWE-285 | Critical9.8 | — | 0.3% | Aug 4, 2025 |
37Monitor | CVE-2026-50548No exploit | Cursor Desktop sandbox escape via agent-controlled working directoryanysphere · cursor · CWE-22 | Critical9.3 | — | 1.0% | Jun 25, 2026 |
37Monitor | CVE-2026-50549No exploit | Cursor Desktop sandbox escape via symlink and failed path canonicalizationanysphere · cursor · CWE-59 | Critical9.3 | — | 1.0% | Jun 25, 2026 |
35Monitor | CVE-2025-61591No exploit | Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Executionanysphere · cursor · CWE-78 | High8.8 | — | 1.1% | Oct 3, 2025 |
35Monitor | CVE-2025-54131No exploit | Cursor bypasses its allow list to execute arbitrary commandsanysphere · cursor · CWE-77 | High8.8 | — | 0.5% | Aug 1, 2025 |
35Monitor | CVE-2025-64108No exploit | Cursor's Sensitive File Modification can Lead to NTFS Path Quirksanysphere · cursor · CWE-22 | High8.8 | — | 0.4% | Nov 4, 2025 |
35Monitor | CVE-2025-61592No exploit | Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Configanysphere · cursor · CWE-829 | High8.8 | — | 0.4% | Oct 3, 2025 |
35Monitor | CVE-2025-61593No exploit | Cursor CLI Agent: Sensitive File Overwrite Bypassanysphere · cursor · CWE-94 | High8.8 | — | 0.4% | Oct 3, 2025 |
35Monitor | CVE-2025-64106No exploit | Cursor: Speedbump Modal Bypass in MCP Server Deep-Linkanysphere · cursor · CWE-78 | High8.8 | — | 0.3% | Nov 4, 2025 |
35Monitor | CVE-2025-64107No exploit | Cursor is Vulnerable to Path Manipulation Using Backslashes on Windowsanysphere · cursor · CWE-22 | High8.8 | — | 0.3% | Nov 4, 2025 |
34Monitor | CVE-2026-63093No exploit | Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspaceanysphere · cursor · CWE-426 | High8.7 | — | 0.8% | Jul 17, 2026 |
34Monitor | CVE-2025-64110No exploit | Cursor: Authentication Bypass Possible via New Cursorignore Writeanysphere · cursor · CWE-284 | High8.7 | — | 0.3% | Nov 5, 2025 |
34Monitor | CVE-2026-31854No exploit | Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypassanysphere · cursor · CWE-78 | High8.7 | — | 0.3% | Mar 11, 2026 |
30Monitor | CVE-2025-61590No exploit | Cursor is vulnerable to RCE via .code-workspace files using Prompt Injectionanysphere · cursor · CWE-94 | High7.5 | — | 0.5% | Oct 3, 2025 |
30Monitor | CVE-2025-54132No exploit | Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetchanysphere · cursor · CWE-918 | High7.5 | — | 0.4% | Aug 1, 2025 |
28Monitor | CVE-2026-22708No exploit | Cursor has a Terminal Tool Allowlist Bypass via Environment Variablesanysphere · cursor · CWE-15 | High7.2 | — | 0.8% | Jan 14, 2026 |
23Monitor | CVE-2025-61589No exploit | Cursor: Potential Information Leakage via Mermaid Diagramanysphere · cursor · CWE-200 | Medium5.9 | — | 0.2% | Oct 3, 2025 |
21Monitor | CVE-2025-54133No exploit | Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialoganysphere · cursor · CWE-78 | Medium5.3 | — | 0.4% | Aug 1, 2025 |
- CVE-2025-5413644Plan
Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals
HighCVSS 8.8Proof of conceptEPSS 31%anysphere · cursorAug 1, 2025
- CVE-2025-5413540Plan
Cursor Agent is vulnerable to prompt injection via MCP Special Files
CriticalCVSS 9.8Proof of conceptEPSS 2%anysphere · cursorAug 4, 2025
- CVE-2026-2626839Monitor
Cursor sandbox escape via Git hooks
CriticalCVSS 9.9Proof of conceptEPSS 0%anysphere · cursorFeb 13, 2026
- CVE-2025-5994439Monitor
Cursor IDE: Sensitive File Overwrite Bypass is Possible
CriticalCVSS 9.8No exploitEPSS 0%anysphere · cursorOct 3, 2025
- CVE-2025-5413039Monitor
Cursor Agent is vulnerable prompt injection via Editor Special Files
CriticalCVSS 9.8No exploitEPSS 0%anysphere · cursorAug 4, 2025
- CVE-2026-5054837Monitor
Cursor Desktop sandbox escape via agent-controlled working directory
CriticalCVSS 9.3No exploitEPSS 1%anysphere · cursorJun 25, 2026
- CVE-2026-5054937Monitor
Cursor Desktop sandbox escape via symlink and failed path canonicalization
CriticalCVSS 9.3No exploitEPSS 1%anysphere · cursorJun 25, 2026
- CVE-2025-6159135Monitor
Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Execution
HighCVSS 8.8No exploitEPSS 1%anysphere · cursorOct 3, 2025
- CVE-2025-5413135Monitor
Cursor bypasses its allow list to execute arbitrary commands
HighCVSS 8.8No exploitEPSS 0%anysphere · cursorAug 1, 2025
- CVE-2025-6410835Monitor
Cursor's Sensitive File Modification can Lead to NTFS Path Quirks
HighCVSS 8.8No exploitEPSS 0%anysphere · cursorNov 4, 2025
- CVE-2025-6159235Monitor
Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config
HighCVSS 8.8No exploitEPSS 0%anysphere · cursorOct 3, 2025
- CVE-2025-6159335Monitor
Cursor CLI Agent: Sensitive File Overwrite Bypass
HighCVSS 8.8No exploitEPSS 0%anysphere · cursorOct 3, 2025
- CVE-2025-6410635Monitor
Cursor: Speedbump Modal Bypass in MCP Server Deep-Link
HighCVSS 8.8No exploitEPSS 0%anysphere · cursorNov 4, 2025
- CVE-2025-6410735Monitor
Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows
HighCVSS 8.8No exploitEPSS 0%anysphere · cursorNov 4, 2025
- CVE-2026-6309334Monitor
Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace
HighCVSS 8.7No exploitEPSS 0%anysphere · cursorJul 17, 2026
- CVE-2025-6411034Monitor
Cursor: Authentication Bypass Possible via New Cursorignore Write
HighCVSS 8.7No exploitEPSS 0%anysphere · cursorNov 5, 2025
- CVE-2026-3185434Monitor
Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass
HighCVSS 8.7No exploitEPSS 0%anysphere · cursorMar 11, 2026
- CVE-2025-6159030Monitor
Cursor is vulnerable to RCE via .code-workspace files using Prompt Injection
HighCVSS 7.5No exploitEPSS 0%anysphere · cursorOct 3, 2025
- CVE-2025-5413230Monitor
Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetch
HighCVSS 7.5No exploitEPSS 0%anysphere · cursorAug 1, 2025
- CVE-2026-2270828Monitor
Cursor has a Terminal Tool Allowlist Bypass via Environment Variables
HighCVSS 7.2No exploitEPSS 0%anysphere · cursorJan 14, 2026
- CVE-2025-6158923Monitor
Cursor: Potential Information Leakage via Mermaid Diagram
MediumCVSS 5.9No exploitEPSS 0%anysphere · cursorOct 3, 2025
- CVE-2025-5413321Monitor
Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialog
MediumCVSS 5.3No exploitEPSS 0%anysphere · cursorAug 1, 2025