PT-2025-15453 · Cursor · Cursor

Published 2025-04-08 · Updated 2025-04-09 · CVE-2025-32018

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Cursor versions 0.45.0 through 0.48.6

Description: The issue affects the set of file paths the Cursor Agent is permitted to modify automatically. Under specific conditions, the agent could be prompted to automatically write to files outside of the opened workspace. This behavior required deliberate prompting, making successful exploitation highly impractical in real-world scenarios. The edited file was still displayed in the UI for user review, making it unlikely for the edit to go unnoticed.

Recommendations: For versions 0.45.0 through 0.48.6, update to version 0.48.7 to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-32018

GHSA-QJH8-MH96-FC86

Affected Products

Cursor

References · 6

• https://osv.dev/vulnerability/CVE-2025-32018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32018 · Security Note
• https://github.com/getcursor/cursor/security/advisories/GHSA-qjh8-mh96-fc86 · Note
• https://twitter.com/CVEnew/status/1909642076116947039 · Twitter Post
• https://twitter.com/threatsbank/status/1909971004673175952 · Twitter Post
• https://twitter.com/WolfgangSesin/status/1909659544088625536 · Twitter Post