Sensitive File Modification - NTFS Path Quirks

Summary

Various NTFS path quirks allow a prompt injection attacker to circumvent sensitive file protections and overwrite files which Cursor requires human approval to overwrite.

Details

Short path and data stream syntax in NTFS paths can break Cursor's sensitive path detection, allowing an attacker to modify a protected file without Cursor asking for human approval.

Impact

Modification of some of the protected files can lead to RCE. Must be chained with a prompt injection or malicious model attach. Only affects systems supporting NTFS.

Remediation

Paths are now normalized for NTFS before guardrails are applied.