Agent report

Cursor failures

4 documented incidents, average severity 7.8/10. Most common failure mode: destructive action.
n = 4
4
Incidents
7.8
Avg severity
1
Critical
4
Source checked

Severity breakdown

Stacked severity breakdown per agent. Longer bar = more incidents.

Failure modes

Distribution of failure modes across all documented incidents.

Worst documented incident

9.0critical

Cursor's terminal sandbox trusted an agent-set working directory, letting zero-click prompt injection escape it and gain code execution (CVE-2026-50548)

All 4 incidents

9.0
Cursor's terminal sandbox trusted an agent-set working directory, letting zero-click prompt injection escape it and gain code execution (CVE-2026-50548)
8.0
Malicious cloned repository triggered code execution in Cursor on Windows
7.0
Cursor agent approved to delete one 18.5GB temp folder instead ran a mis-quoted rmdir that wiped a developer's source, Git repo, and six months of ERP backups
7.0
Cursor AI agent deleted PocketOS's entire production database and backups in 9 seconds