CVE-2026-31854: Anysphere Cursor

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously crafted instructions, the model may attempt to follow them in order to “assist” the user. When combined with a bypass of the command whitelist mechanism, such indirect prompt injections could result in commands being executed automatically, without the user’s explicit intent, thereby posing a significant security risk. This vulnerability is fixed in 2.0.

Affected products

• Anysphere Cursor: before 2.0 (fixed in 2.0)

Published 2026-03-11. Last modified 2026-06-17.