https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:38:05.859833+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-31854 CVE-2026-31854 — Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass 2026-10-07T10:38:05.875301+00:00

Affected: cursor

Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously crafted instructions, the model may attempt to follow them in order to “assist” the user. When combined with a bypass of the command whitelist mechanism, such indirect prompt injections could result in commands being executed automatically, without the user’s explicit intent, thereby posing a significant security risk. This vulnerability is fixed in 2.0.