Sources
- Cursor documentation: Agent security · Run modes · sandbox.json · permissions.json · Hooks · CLI permissions · Cloud agent network · Ignore files
- Vulnerabilities: Cursor security advisories · CVE-2025-54135 · CVE-2026-73217 · GHSA-v4xv-rqh3-w9mc
- Research: Cato Networks, CurXecute · Check Point, MCPoison · Novee, CVE-2026-26268 · Cato Networks, DuneSlide · Straiker, NomShub · Pillar Security · Kaspersky
This post is informational and comes with no guarantee of a vulnerability-free setup, so test every configuration in your own environment. AISecurityLabs.org is independent and not affiliated with Anysphere. Cursor is a trademark of its owner, used here only to identify the product.