Lucene search
+L

Exploit for OS Command Injection in Anysphere Cursor

πŸ—“οΈΒ 03 Mar 2026Β 12:05:40Reported byΒ felixbillieresTypeΒ 
githubexploit
Β githubexploit
πŸ”—Β github.comπŸ‘Β 267Β Views

Exploits command injection in Claude Code MCP approval by name, enabling arbitrary code execution.

Related
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
slopguard
21 Jul 202615:39
–githubexploit
bdu_fstec
BDU FSTEC
Cursor Code Execution
7 Aug 202500:00
–bdu_fstec
circl
Circl
CVE-2025-54136
5 Aug 202511:01
–circl
cnnvd
CNNVD
Cursor operating system command injection vulnerability
2 Aug 202500:00
–cnnvd
nessus
Tenable Nessus
Cursor < 1.2.4 RCE (GHSA-24mc-g4xr-4395)
6 Aug 202500:00
–nessus
cve
CVE
CVE-2025-54136
1 Aug 202523:08
–cve
cvelist
Cvelist
CVE-2025-54136 Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals
1 Aug 202523:08
–cvelist
euvd
EUVD
EUVD-2025-23405
3 Oct 202520:07
–euvd
kitploit
Kitploit
ai-tool-poisoning-guard
1 Nov 202605:55
–kitploit
kitploit
Kitploit
CVE-2025-54136
1 Nov 202600:10
–kitploit
Rows per page

Data

Build on a solid foundation withΒ Vulners data

WeΒ provide theΒ essential building blocks forΒ cybersecurity solutions withΒ comprehensive, structured, andΒ constantly updated vulnerability andΒ exploits data

Api

Power your application withΒ Vulners API

The Vulners REST API offers reliable, high-performance access toΒ vulnerabilityΒ intelligence, withΒ 99.9%Β SLAΒ uptime andΒ CDN-backed data delivery forΒ seamlessΒ global access

App

Assess and manage vulnerabilities withΒ VulnersΒ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Mar 2026 12:07Current
8.3High risk
Vulners AI Score8.3
CVSS 3.17.2 - 8.8
EPSS0.31501
SSVC
267