AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

CursorGHSA-x2vq-h6v6-jhc6

Cursor CLI Agent - Sensitive File Overwrite Bypass

Cursor

CVE-2025-61593 · Published Oct 2, 2025

High7.1
Fix: upgrade to 2025.09.17-25b418f or later
GitHub advisory

Summary

A vulnerability in the way Cursor CLI Agent protects its sensitive files (i.e. */.cursor/cli.json) allows attackers to modify the content of the files through prompt injection, thus achieving remote code execution.

Impact

A prompt injection can now lead to full RCE through modifying sensitive files on case-insensitive filesystems

Remediations

The sensitive file checks were fixed to respect the local filesystem.

Affected versions

PackageAffectedFixed in
Cursor CLI
Product
< 2025.09.17-25b418f2025.09.17-25b418f
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-178

More Cursor advisories

All Cursor
High 8.8Nov 3, 2025Sensitive File Protection Bypass - Path Manipulation Using Backslashes on WindowsCVE-2025-64107fixed in 2.0High 8.0Oct 2, 2025Cursor IDE - Sensitive File Overwrite BypassCVE-2025-59944fixed in 1.7High 8.8Oct 2, 2025Remote Code Execution in Cursor CLI via Cursor Agent MCP OAuth2 CommunicationCVE-2025-61591fixed in 2025.09.17-25b418fHigh 8.8Oct 2, 2025Arbitrary code execution Permissive CLI Config in Cursor CLICVE-2025-61592fixed in 2025.09.17-25b418fHigh 7.5Oct 2, 2025RCE via .code-workspace files using Prompt InjectionCVE-2025-61590fixed in 1.7Medium 5.9Oct 2, 2025Potential Information Leakage via Mermaid DiagramCVE-2025-61589fixed in 1.7