anysphere kayıtları
anysphere üreticisine ait 22 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 13
- Düzeltme kaydı olan
- %77,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-284 Improper Access Control1
- CWE-285 Improper Authorization1
- CWE-426 Untrusted Search Path1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
22 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
43Planlayın | CVE-2025-54136Kavram kanıtı | Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvalsanysphere · cursor · CWE-78 | Yüksek8,8 | — | %28,2 | 1 Ağu 2025 |
40Planlayın | CVE-2025-54135Kavram kanıtı | Cursor Agent is vulnerable to prompt injection via MCP Special Filesanysphere · cursor · CWE-78 | Kritik9,8 | — | %1,8 | 4 Ağu 2025 |
39İzleyin | CVE-2025-59944İstismar yok | Cursor IDE: Sensitive File Overwrite Bypass is Possibleanysphere · cursor · CWE-178 | Kritik9,8 | — | %0,4 | 3 Eki 2025 |
39İzleyin | CVE-2026-26268Kavram kanıtı | Cursor sandbox escape via Git hooksanysphere · cursor · CWE-862 | Kritik9,9 | — | %0,4 | 13 Şub 2026 |
39İzleyin | CVE-2025-54130İstismar yok | Cursor Agent is vulnerable prompt injection via Editor Special Filesanysphere · cursor · CWE-285 | Kritik9,8 | — | %0,3 | 4 Ağu 2025 |
37İzleyin | CVE-2026-50548İstismar yok | Cursor Desktop sandbox escape via agent-controlled working directoryanysphere · cursor · CWE-22 | Kritik9,3 | — | %1,0 | 25 Haz 2026 |
37İzleyin | CVE-2026-50549İstismar yok | Cursor Desktop sandbox escape via symlink and failed path canonicalizationanysphere · cursor · CWE-59 | Kritik9,3 | — | %1,0 | 25 Haz 2026 |
35İzleyin | CVE-2025-61591İstismar yok | Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Executionanysphere · cursor · CWE-78 | Yüksek8,8 | — | %1,1 | 3 Eki 2025 |
35İzleyin | CVE-2025-64108İstismar yok | Cursor's Sensitive File Modification can Lead to NTFS Path Quirksanysphere · cursor · CWE-22 | Yüksek8,8 | — | %0,4 | 4 Kas 2025 |
35İzleyin | CVE-2025-54131İstismar yok | Cursor bypasses its allow list to execute arbitrary commandsanysphere · cursor · CWE-77 | Yüksek8,8 | — | %0,4 | 1 Ağu 2025 |
35İzleyin | CVE-2025-61592İstismar yok | Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Configanysphere · cursor · CWE-829 | Yüksek8,8 | — | %0,4 | 3 Eki 2025 |
35İzleyin | CVE-2025-61593İstismar yok | Cursor CLI Agent: Sensitive File Overwrite Bypassanysphere · cursor · CWE-94 | Yüksek8,8 | — | %0,4 | 3 Eki 2025 |
35İzleyin | CVE-2025-64106İstismar yok | Cursor: Speedbump Modal Bypass in MCP Server Deep-Linkanysphere · cursor · CWE-78 | Yüksek8,8 | — | %0,3 | 4 Kas 2025 |
35İzleyin | CVE-2025-64107İstismar yok | Cursor is Vulnerable to Path Manipulation Using Backslashes on Windowsanysphere · cursor · CWE-22 | Yüksek8,8 | — | %0,3 | 4 Kas 2025 |
34İzleyin | CVE-2026-63093İstismar yok | Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspaceanysphere · cursor · CWE-426 | Yüksek8,7 | — | %0,8 | 17 Tem 2026 |
34İzleyin | CVE-2026-31854İstismar yok | Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypassanysphere · cursor · CWE-78 | Yüksek8,7 | — | %0,4 | 11 Mar 2026 |
34İzleyin | CVE-2025-64110İstismar yok | Cursor: Authentication Bypass Possible via New Cursorignore Writeanysphere · cursor · CWE-284 | Yüksek8,7 | — | %0,3 | 5 Kas 2025 |
30İzleyin | CVE-2025-61590İstismar yok | Cursor is vulnerable to RCE via .code-workspace files using Prompt Injectionanysphere · cursor · CWE-94 | Yüksek7,5 | — | %0,5 | 3 Eki 2025 |
30İzleyin | CVE-2025-54132İstismar yok | Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetchanysphere · cursor · CWE-918 | Yüksek7,5 | — | %0,3 | 1 Ağu 2025 |
28İzleyin | CVE-2026-22708İstismar yok | Cursor has a Terminal Tool Allowlist Bypass via Environment Variablesanysphere · cursor · CWE-15 | Yüksek7,2 | — | %0,8 | 14 Oca 2026 |
23İzleyin | CVE-2025-61589İstismar yok | Cursor: Potential Information Leakage via Mermaid Diagramanysphere · cursor · CWE-200 | Orta5,9 | — | %0,2 | 3 Eki 2025 |
21İzleyin | CVE-2025-54133İstismar yok | Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialoganysphere · cursor · CWE-78 | Orta5,3 | — | %0,3 | 1 Ağu 2025 |
- CVE-2025-5413643Planlayın
Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals
YüksekCVSS 8,8Kavram kanıtıEPSS %28anysphere · cursor1 Ağu 2025
- CVE-2025-5413540Planlayın
Cursor Agent is vulnerable to prompt injection via MCP Special Files
KritikCVSS 9,8Kavram kanıtıEPSS %1anysphere · cursor4 Ağu 2025
- CVE-2025-5994439İzleyin
Cursor IDE: Sensitive File Overwrite Bypass is Possible
KritikCVSS 9,8İstismar yokEPSS %0anysphere · cursor3 Eki 2025
- CVE-2026-2626839İzleyin
Cursor sandbox escape via Git hooks
KritikCVSS 9,9Kavram kanıtıEPSS %0anysphere · cursor13 Şub 2026
- CVE-2025-5413039İzleyin
Cursor Agent is vulnerable prompt injection via Editor Special Files
KritikCVSS 9,8İstismar yokEPSS %0anysphere · cursor4 Ağu 2025
- CVE-2026-5054837İzleyin
Cursor Desktop sandbox escape via agent-controlled working directory
KritikCVSS 9,3İstismar yokEPSS %1anysphere · cursor25 Haz 2026
- CVE-2026-5054937İzleyin
Cursor Desktop sandbox escape via symlink and failed path canonicalization
KritikCVSS 9,3İstismar yokEPSS %1anysphere · cursor25 Haz 2026
- CVE-2025-6159135İzleyin
Cursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code Execution
YüksekCVSS 8,8İstismar yokEPSS %1anysphere · cursor3 Eki 2025
- CVE-2025-6410835İzleyin
Cursor's Sensitive File Modification can Lead to NTFS Path Quirks
YüksekCVSS 8,8İstismar yokEPSS %0anysphere · cursor4 Kas 2025
- CVE-2025-5413135İzleyin
Cursor bypasses its allow list to execute arbitrary commands
YüksekCVSS 8,8İstismar yokEPSS %0anysphere · cursor1 Ağu 2025
- CVE-2025-6159235İzleyin
Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config
YüksekCVSS 8,8İstismar yokEPSS %0anysphere · cursor3 Eki 2025
- CVE-2025-6159335İzleyin
Cursor CLI Agent: Sensitive File Overwrite Bypass
YüksekCVSS 8,8İstismar yokEPSS %0anysphere · cursor3 Eki 2025
- CVE-2025-6410635İzleyin
Cursor: Speedbump Modal Bypass in MCP Server Deep-Link
YüksekCVSS 8,8İstismar yokEPSS %0anysphere · cursor4 Kas 2025
- CVE-2025-6410735İzleyin
Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows
YüksekCVSS 8,8İstismar yokEPSS %0anysphere · cursor4 Kas 2025
- CVE-2026-6309334İzleyin
Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace
YüksekCVSS 8,7İstismar yokEPSS %0anysphere · cursor17 Tem 2026
- CVE-2026-3185434İzleyin
Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass
YüksekCVSS 8,7İstismar yokEPSS %0anysphere · cursor11 Mar 2026
- CVE-2025-6411034İzleyin
Cursor: Authentication Bypass Possible via New Cursorignore Write
YüksekCVSS 8,7İstismar yokEPSS %0anysphere · cursor5 Kas 2025
- CVE-2025-6159030İzleyin
Cursor is vulnerable to RCE via .code-workspace files using Prompt Injection
YüksekCVSS 7,5İstismar yokEPSS %0anysphere · cursor3 Eki 2025
- CVE-2025-5413230İzleyin
Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetch
YüksekCVSS 7,5İstismar yokEPSS %0anysphere · cursor1 Ağu 2025
- CVE-2026-2270828İzleyin
Cursor has a Terminal Tool Allowlist Bypass via Environment Variables
YüksekCVSS 7,2İstismar yokEPSS %0anysphere · cursor14 Oca 2026
- CVE-2025-6158923İzleyin
Cursor: Potential Information Leakage via Mermaid Diagram
OrtaCVSS 5,9İstismar yokEPSS %0anysphere · cursor3 Eki 2025
- CVE-2025-5413321İzleyin
Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialog
OrtaCVSS 5,3İstismar yokEPSS %0anysphere · cursor1 Ağu 2025