CVE-2026-61613

Cursor: Cloud Agent Browser Sandbox Escape

State: Published
Severity: 7.7 High
Published: Jul 15, 2026
Updated: Jul 21, 2026
Reserved: Jul 10, 2026

Description

Cursor is a code editor built for programming with AI. Prior to the Cloud Agent fix on 03/31/2026, browser-enabled Cursor Cloud Agent sessions allowed attacker-controlled web content to connect from inside the agent container to an unauthenticated local agent endpoint, enabling code execution within the affected Cloud Agent sandbox or session and access to files, repository contents, environment variables, credentials, and GitHub App access tokens available to that session. This issue was fixed on 03/31/2026 by requiring authentication for the relevant agent endpoint.

Scores

CVSS	Score	Vector	Source
4.0	7.7 High	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L	GitHub_M

Weaknesses

CWE-306 Missing Authentication for Critical Function

Affected Products

Product	Versions
cursorcursor	< 03/31/2026Affected

References

https://github.com/cursor/cursor/security/advisories/GHSA-whx2-4gvm-m3r3

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.