Cursor IDE — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Cursor IDE Vulnerability Allows RCE via Malicious Git Repositories

  A critical vulnerability in the Cursor IDE, tracked as CVE-2026-26268, has been disclosed, allowing arbitrary code execution (RCE) on developers' machines. The flaw arises from the interaction between Cursor's AI agent…

  3 articles · Updated April 29, 2026
• Critical RCE Vulnerabilities in Cursor IDE Enable Zero-Click Prompt Injection Attacks

  Cato AI Labs disclosed two critical remote code execution (RCE) vulnerabilities in Cursor IDE, tracked as CVE-2026-50548 and CVE-2026-50549. These vulnerabilities allow attackers to exploit zero-click prompt injection,…

  37 articles · Updated July 1, 2026
• Critical RCE Vulnerabilities Found in AI Inference Engines of Major Tech Firms

  Researchers have identified critical remote code execution (RCE) vulnerabilities in AI inference engines utilized by Meta, Nvidia, and Microsoft. These flaws could potentially allow attackers to exploit the frameworks,…

  6 articles · Updated November 17, 2025
• RCE Vulnerabilities Discovered in Major AI Inference Frameworks

  Critical remote code execution (RCE) vulnerabilities have been identified in AI inference frameworks from Meta, Nvidia, Microsoft, and open-source projects like vLLM and SGLang. These flaws arise from unsafe code reuse,…

  3 articles · Updated November 18, 2025
• CursorJack Vulnerability Exposes Code Execution Risks in AI Development Environments

  Proofpoint Threat Research has identified a vulnerability named CursorJack that exploits deeplinks in the Cursor Integrated Development Environment (IDE). This method allows attackers to potentially execute arbitrary…

  2 articles · Updated March 17, 2026
• Rogue MCP Servers Exploit Vulnerability in Cursor Code Editor

  Security researchers have identified a vulnerability in Cursor, an AI-powered code editor, that allows rogue Model Context Protocol (MCP) servers to inject malicious code into its internal browser. This exploit can…

  2 articles · Updated November 17, 2025
• Rogue MCP Servers Exploit Vulnerability in Cursor's Internal Browser

  Hackers are exploiting a critical vulnerability in Cursor, an AI-powered code editor, by using compromised Model Context Protocol (MCP) servers to inject malicious code. This attack allows the rogue servers to…

  2 articles · Updated November 17, 2025

Recent Intelligence Reports

• Critical Cursor IDE RCE Vulnerabilities Enable Prompt Injection in Zero — Ground.News · July 2, 2026
• Critical Cursor IDE Flaws Let Attackers Execute Code via Zero — Gbhackers · July 2, 2026
• 03 radar.offseq.com Zero-Click Prompt Injection to RCE in Cursor IDE: DuneSlide — radar.offseq.com · July 1, 2026
• Critical Cursor bug could turn routine Git into RCE — Csoonline · April 28, 2026
• CursorJack: weaponizing Deeplinks to exploit Cursor IDE — Proofpoint · March 17, 2026
• AI Frameworks Under Siege: RCE Flaws and Malware Surge Threaten 40% of Dev Pipelines — Webpronews · November 18, 2025
• Rogue MCP servers can take over Cursor’s built — Csoonline · November 13, 2025

Related Entities