CyberSecBulletin

Getcursor vulnerabilities

We track 2 vulnerabilities in Getcursor products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 8, 2025.

2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score

Latest Getcursor vulnerabilities

  • 8.0 High severity

    cursor: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2025-32018Getcursor

    Cursor is a code editor built for programming with AI. In versions 0.45.0 through 0.48.6, the Cursor app introduced a regression affecting the set of file paths the Cursor Agent is permitted to modify automatically. Under specific conditions, the agent could b

  • 9.2 Critical severity

    Cursor is a code editor built for programming with AI.

    CVE-2024-48919Getcursor

    Cursor is a code editor built for programming with AI. Prior to Sep 27, 2024, if a user generated a terminal command via Cursor's Terminal Cmd-K/Ctrl-K feature and if the user explicitly imported a malicious web page into the Terminal Cmd-K prompt, an attacker