Skip to content
LLMHigh

CVE-2025-54135: Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with…

Occurred
Aug 5, 2025
Published
Aug 5, 2025
Source
NVD CVE

Summary

Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions below 1.3.9, If the file is a dotfile, editing it requires approval but creating a new one doesn't. Hence, if sensitive MCP files, such as the .cursor/mcp.json file don't already exist in the workspace, an attacker can chain a indirect prompt injection vulnerability to hijack the context to write to the settings file and trigger RCE on the victim without user approval. This is fixed in version 1.3.9.

Tags

  • CVE
  • CVE-2025-54135
  • cvss:HIGH

Classification

Category confidence: 90%
Severity confidence: 85%

Rationale: AI-powered code editor vulnerability allows remote code execution via prompt injection without user approval.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source