Subscribe

Hub/Tools/Cursor

Cursor

Anysphere · Everything the hub tracks about Cursor: MCP Clients, AI Plugins, IDE Integrations, AI Pricing, AI Security.

MCPPluginsIDEsPricingSecurity36 advisories

MCP Clients

Cursor

Yes: Tools, Resources, Prompts, Elicitation, Roots, OAuth sign-in, Local (stdio), Remote (HTTP/SSE)

2 of 10 unknown

Full mcp detail →

AI Plugins

Cursor plugins

Yes: Public directory, MCP-based, Bundles skills, Hooks, Git marketplaces, OAuth sign-in, Agent Plugins standard

3 of 10 unknown

Full plugins detail →

IDE Integrations

Cursor

Yes: Inline completion, Agent mode, MCP, BYO model / key, JetBrains, Zed

Partial: Xcode

5 of 12 unknown

Full ides detail →

AI Pricing

Cursor (X Subscription)

Free tier: Yes: Free plan with a small weekly pool

Free $0, Plus $8, Premium $30, Super $100, Ultra $200, Teams $30 / $100 / $200 per seat

All 7 plans →

AI Security

Cursor

Yes: Tool-call approval prompts, Per-tool allow / deny, Sandboxing, OAuth for remote MCP, Admin allowlists, Audit logs, Data retention / training opt-out, Security disclosure page

Partial: Verified marketplace listings, Auto-install / auto-update control

0 of 10 unknown

Full security detail →

Security advisories (36)

2 critical · 22 high · 7 medium · 2 low · 3 not rated
  1. Not Ratedresolved
  2. Not Ratedopen
  3. Highno fix listed

    Sandbox escape via launching privileged containers

    Cursor · CVE-2026-73218 · GHSA-v4xv-rqh3-w9mc

    Cursor
  4. Highpatched

    Sandbox escape via tampered Python virtual environments

    Cursor · CVE-2026-73217 · GHSA-p9g2-cr55-cw9c

    Cursor
  5. High 7.7patched

    Cloud Agent Browser Sandbox Escape

    Cursor · CVE-2026-61613 · GHSA-whx2-4gvm-m3r3

    Cursor
  6. Criticalpatched
  7. Criticalpatched
  8. High 8.5patched

    Cursor Desktop sandbox escape via Claude hook configuration

    Cursor · CVE-2026-48124 · GHSA-pc9j-3qc2-95wv

    Cursor
  9. Highpatched
  10. High 8.0patched

    Sandbox escape via Git hooks

    Cursor · CVE-2026-26268 · GHSA-8pcm-8jpx-hv8r

    Cursor
  11. Highpatched

    Terminal Tool Allowlist Bypass via Environment Variables

    Cursor · CVE-2026-22708 · GHSA-82wg-qcm4-fp2w

    Cursor
  12. Highpatched

    Cursorignore Bypass via New Cursorignore Write

    Cursor · CVE-2025-64110 · GHSA-vhc2-fjv4-wqch

    Cursor
  13. High 8.8patched

    Sensitive File Modification - NTFS Path Quirks

    Cursor · CVE-2025-64108 · GHSA-6r98-6qcw-rxrw

    Cursor
  14. High 8.8patched
  15. High 8.8patched

    Speedbump Modal Bypass in Cursor MCP Server Deep-Link

    Cursor · CVE-2025-64106 · GHSA-4575-fh42-7848

    Cursor
  16. High 8.8patched
  17. Medium 5.9patched

    Potential Information Leakage via Mermaid Diagram

    Cursor · CVE-2025-61589 · GHSA-xw2x-252g-97w2

    Cursor
  18. High 7.5patched

    RCE via .code-workspace files using Prompt Injection

    Cursor · CVE-2025-61590 · GHSA-xg6w-rmh5-r77r

    Cursor
  19. High 8.0patched

    Cursor IDE - Sensitive File Overwrite Bypass

    Cursor · CVE-2025-59944 · GHSA-xcwh-rrwj-gxc7

    Cursor
  20. High 7.1patched

    Cursor CLI Agent - Sensitive File Overwrite Bypass

    Cursor · CVE-2025-61593 · GHSA-x2vq-h6v6-jhc6

    Cursor
  21. High 8.8patched
  22. High 8.8patched

    Arbitrary code execution Permissive CLI Config in Cursor CLI

    Cursor · CVE-2025-61592 · GHSA-v64q-396f-7m79

    Cursor
  23. High 7.5patched
  24. High 8.5patched
  25. Mediumpatched

    MCP Install Deeplink Did Not Show Arguments on User-Dialog

    Cursor · CVE-2025-54133 · GHSA-r22h-5wp2-2wfv

    Cursor
  26. Medium 6.4patched

    Bypassing allow list to execute an arbitrary command

    Cursor · CVE-2025-54131 · GHSA-534m-3w6r-8pqr

    Cursor
  27. Medium 4.4patched

    Arbitrary Image Fetch in Mermaid Diagram Tool

    Cursor · CVE-2025-54132 · GHSA-43wj-mwcc-x93p

    Cursor
  28. High 7.2patched
  29. Medium 4.3patched
  30. Medium 4.3patched
  31. Medium 5.9patched

    Potential Information Leakage using JSON schema in Cursor Agent

    Cursor · CVE-2025-49150 · GHSA-9h3v-h59j-v6rj

    Cursor
  32. High 8.0patched
  33. Not Ratedresearch
  34. Lowpatched
  35. Highpatched

    RCE via Prompt Injection Into Cursor's Terminal Cmd-K

    Cursor · CVE-2024-48919 · GHSA-rmj9-23rg-gr67

    Cursor
  36. Low 3.8patched

    TCC Bypass in Cursor's macOS Application

    Cursor · CVE-2024-45599 · GHSA-x352-xv29-r74m

    Cursor

Recent updates

  1. Security

    Cursor VS Code Extension Marketplace: Malicious 'Anthropic.claude-code' 2.1.312 / 2.1.313 in Cursor's extension marketplace

    Not Rated. Status: resolved. Cursor says two impersonating versions (Windows / macOS) attempted an SSH backdoor. Cursor removed them, shut down and rebuilt the marketplace, and rotated keys.

    Source

  2. Security

    Postman Desktop 12.33.4–12.35.1: Postman Desktop auto-installs Codex / Claude Code plugins and pre-trusts its own startup hook

    Not Rated. Status: open. Users report Postman's auto-existing-upgrade step installing Postman plugins into Claude Code and Codex, writing a trusted hook hash into Codex config, adding a SessionStart hook, the remote MCP server mcp.postman.com and a CLI in ~/.local/bin. Postman staff replied on Nov 3 that opt-in will be made clearer and hook approval is under review. No CVE.

    Source

  3. Pricing

    Cursor moves to the X Subscription: $8 to $200 tiers with a shared Grok pool

    Plus $8, Premium $30, Super $100 and Ultra $200 per month (yearly $80 to $2,000). One weekly pool is shared across Grok and Cursor; third-party models bill at API list price from prepaid credit. Legacy Pro plans keep working.

    Source

Other tools

Claude CodeClaude appsChatGPTCodexGitHub CopilotWindsurf / DevinGeminiJetBrains AIKiroAmazon Q DeveloperZedClineRoo CodeContinueGooseReplitPerplexityMicrosoft 365 CopilotTabnineMCP protocol, SDKs and registry

Weekly, free

What changed in AI integrations

One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.

You'll finish signing up on beehiiv.