What is the CVSS score of CVE-2026-31854?

CVE-2026-31854 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Cursor are affected by CVE-2026-31854?

Organizations using Cursor face significant risk from CVE-2026-31854, a OS command injection vulnerability rated CVSS 8.8.

Is there a public PoC exploit available for CVE-2026-31854?

Yes, a public proof-of-concept exploit is available for CVE-2026-31854. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-31854?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Validate that input sanitization is in place for all user-controlled parameters.

Cursor CVE-2026-31854

HIGH

OS Command Injection (CWE-78)

2026-03-11 security-advisories@github.com

Command Injection Cursor Anysphere

8.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

CVE Published

Mar 11, 2026 - 17:16 nvd

HIGH 8.8

DescriptionGitHub Advisory

Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously crafted instructions, the model may attempt to follow them in order to “assist” the user. When combined with a bypass of the command whitelist mechanism, such indirect prompt injections could result in commands being executed automatically, without the user’s explicit intent, thereby posing a significant security risk. This vulnerability is fixed in 2.0.

AnalysisAI

Cursor is a code editor built for programming with AI. versions up to 2.0 is affected by os command injection.

Technical ContextAI

This vulnerability (CWE-78: OS Command Injection) affects Cursor is a code editor built for programming with AI.. Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously crafted instructions, the model may attempt to follow them in order to “assist” the user. When combined with a bypass of the command whitelist mechanism, such indirect prompt injections could result in commands being executed automatically, without the user’s explicit intent, thereby posing a significant security risk. This vulnerability is fixed in 2.0.