Act on this, mostly signal

NVD logs 15 Claude Code and 10 Cursor vulnerabilities through September

What to do

Check your Claude Code and Cursor versions and review config files loaded from untrusted repos.

Why

The German press release lists sandbox escapes in Cursor and unsafe config loading in Claude Code and Gemini CLI, but the full text was blocked.

Read the source at pressebox.de

What the research found

German press release (Oct 22 2026) says NVD lists 15 entries for Claude Code and 10 for Cursor through Sep 29 2026, covering sandbox escapes in Cursor and unsafely loaded config files in Claude Code and Gemini CLI; full text was blocked (HTTP 403), so details are limited to the cached snippet.

Claims and how well the evidence supports them

NVD lists 15 published entries for Claude Code and 10 for Cursor through September 29 2026 98%
Reported flaws include sandbox escapes in Cursor 66%
Reported flaws include unsafely loaded config files in Claude Code and Gemini CLI 6%

Evidence

pressebox.de https://pressebox.de/pressemitteilung/provimedia-gmbh/ki-programmierwerkzeuge-mit-eigenen-lcken-sandbox-ausbrche-in-cursor-unsicher-geladene-konfigurationsdateien-in-claude-code-und-gemini-cli/boxid/1314584

Actionability rated medium.