Hub/AI Security/Cursor
Cursor
Anysphere · Official site
8 Yes2 Partial0 No0 Unknown
| Feature | Status | Notes | Source | Checked |
|---|---|---|---|---|
| Tool-call approval prompts | Yes | Run modes; Auto-review runs allowlisted calls, sandboxes shell commands, sends the rest to a classifier | Source | 2026-11-04 |
| Per-tool allow / deny | Yes | Allowlisted commands and tools run without review | Source | 2026-11-04 |
| Sandboxing | Yes | Shell commands run in a sandbox when possible (Auto-review / Allowlist) | Source | 2026-11-04 |
| OAuth for remote MCP | Yes | OAuth for SSE / Streamable HTTP servers | Source | 2026-11-04 |
| Verified marketplace listings | Partial | Optional extension signature verification for admins | Source | 2026-11-04 |
| Auto-install / auto-update control | Partial | Extension allowlist and install cooldown for admins | Source | 2026-11-04 |
| Admin allowlists | Yes | Enterprise MCP allowlist (command / URL entries) | Source | 2026-11-04 |
| Audit logs | Yes | Audit logs for Enterprise | Source | 2026-11-04 |
| Data retention / training opt-out | Yes | Privacy Mode: no training; on by default for Enterprise | Source | 2026-11-04 |
| Security disclosure page | Yes | 33 GHSAs published on cursor/cursor | Source | 2026-11-04 |
Advisories (36)
Malicious 'Anthropic.claude-code' 2.1.312 / 2.1.313 in Cursor's extension marketplace
Cursor VS Code Extension Marketplace
Postman Desktop auto-installs Codex / Claude Code plugins and pre-trusts its own startup hook
Postman Desktop 12.33.4–12.35.1
Sandbox escape via launching privileged containers
Cursor · CVE-2026-73218 · GHSA-v4xv-rqh3-w9mc
Sandbox escape via tampered Python virtual environments
Cursor · CVE-2026-73217 · GHSA-p9g2-cr55-cw9c
Cursor Desktop sandbox escape via symlink and failed path canonicalization
Cursor · CVE-2026-50549 · GHSA-3v8f-48vw-3mjx
Cursor Desktop sandbox escape via agent-controlled working directory
Cursor · CVE-2026-50548 · GHSA-3p48-7v9f-v5cw
Cursor Desktop sandbox escape via Claude hook configuration
Cursor · CVE-2026-48124 · GHSA-pc9j-3qc2-95wv
Arbitrary Code Execution via Prompt Injection and Whitelist Bypass
Cursor · CVE-2026-31854 · GHSA-hf2x-r83r-qw5q
Terminal Tool Allowlist Bypass via Environment Variables
Cursor · CVE-2026-22708 · GHSA-82wg-qcm4-fp2w
Across the hub
Weekly, free
What changed in AI integrations
One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.