Beveiligingsadvies

CVE-2025-59944

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-03 20:15:30

Laatst bijgewerkt 2025-10-03 20:43:03

Toegewezen door GitHub_M

CVSS-score 8.1

Status PUBLISHED

Beschrijving

Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files (e.g., */.cursor/mcp.json), which allows attackers to modify the content of these files through prompt injection and achieve remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive fileystems. This issue is fixed in version 1.7.

← Alle CVE's bekijken Bekijk op cve.org ↗