VulnWatch VulnWatch
← Back to dashboard
Low nvd · CVE-2026-13068

CVE-2026-13068: An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate ac

Published Jul 22, 2026 CVSS 2.3

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges to the appropriate namespace.

Affected AI Products

cursor
Get the weekly digest. Every Monday: top AI security stories of the week. Free.