Advisoriesby IbisCursorGHSA-xcwh-rrwj-gxc7
Cursor IDE - Sensitive File Overwrite Bypass
Fix: upgrade to 1.7 or later
Summary
A set of case-sensitive checks in the way Cursor IDE protects its sensitive files (i.e. */.cursor/mcp.json) allows attackers to modify the content of the files through prompt injection, thus achieving remote code execution.
Impact
A prompt injection can now lead to full RCE through modifying sensitive files on case-insensitive fileystems
Remediations
The checks were changed to be case insensitive
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Cursor Product | < 1.7 | 1.7 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-178