CVE-2026-31854 — Cursor Affected by Arbitrary Code Execution via Prompt Injection and Whitelist Bypass
Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously crafted instructions, the model may attempt to follow them in orde…
Published: 2026-03-11 · CVSS: 8.7 · CVSS 4.0
Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously crafted instructions, the model may attempt to follow them in order to “assist” the user. When combined with a bypass of the command whitelist mechanism, such indirect prompt injections could result in commands being executed automatically, without the user’s explicit intent, thereby posing a significant security risk. This vulnerability is fixed in 2.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7