CVE-2025-61592highCWE-829

CVE-2025-61592: falha de alta gravidade em cursor

Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config

Publicada em

Seguir esta CVE+ Monitorar cursor

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.5%
Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific CLI configuration from the current working directory (<project>/.cursor/cli.json) could override certain global configurations in Cursor CLI. This allowed users running the CLI inside a malicious repository to be vulnerable to Remote Code Execution through a combination of permissive configuration (allowing shell commands) and prompt injection delivered via project-specific Rules (<project>/.cursor/rules/rule.mdc) or other mechanisms. The fix for this issue is currently available as a patch 2025.09.17-25b418f. As of October 3, 2025 there is no release version.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
cursor · cursor
CVEs relacionadas — cursor

No mesmo produto, das mais perigosas para as menos.

CVE-2025-54136HIGHCursor's Modification of MCP Server Definitions Bypasses Manual Re-approvalsEPSS 31.5%CVE-2025-54135HIGHCursor Agent is vulnerable to prompt injection via MCP Special FilesEPSS 2.1%CVE-2025-62354CRITICALCVE-2025-62354EPSS 1.3%CVE-2025-61591HIGHCursor CLI's Cursor Agent MCP OAuth2 Communication is Vulnerable to Remote Code ExecutionEPSS 1.2%CVE-2026-50548CRITICALCursor Desktop sandbox escape via agent-controlled working directoryEPSS 1.0%CVE-2026-50549CRITICALCursor Desktop sandbox escape via symlink and failed path canonicalizationEPSS 1.0%