Cursor CVEs
Every Cursor vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.
2 CVEs
EPSSCoverage
9.3CVSS 4.0
CVE-2026-50548
Cursor Desktop sandbox escape via agent-controlled working directory
Cursor
EPSS
1.0%
2 stories
4 months ago
9.3CVSS 4.0
CVE-2026-50549
Cursor Desktop sandbox escape via symlink and failed path canonicalization
Cursor
EPSS
1.0%
2 stories
4 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.