PT-2025-31649 · Cursor · Cursor

Hxofir-A · Published 2025-07-07 · Updated 2026-05-20 · CVE-2025-54135

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cursor versions prior to 1.3.9

Description Cursor, an AI-powered code editor, had a flaw that allowed writing files in the workspace without user approval in versions prior to 1.3.9. If a sensitive MCP file, such as .cursor/mcp.json, did not exist, an attacker could chain an indirect prompt injection vulnerability to hijack the context and write to the settings file, triggering remote code execution (RCE) without user approval. The vulnerability, dubbed “CurXecute” (CVE-2025-54135), stems from the Model Context Protocol (MCP) and allows attackers to exploit prompt injection through various third-party MCP servers like Slack and GitHub. Exploitation could lead to ransomware attacks, data theft, and AI manipulation.

Recommendations Update to version 1.3.9 or later.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-829

CWE-78

Related Identifiers

BDU:2025-09488

CVE-2025-54135

GHSA-4CXX-HRM3-49RM

Affected Products

Cursor

References · 65

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54135.json · Exploit
• https://github.com/cursor/cursor/security/advisories/GHSA-4cxx-hrm3-49rm · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09488 · Security Note
• https://osv.dev/vulnerability/CVE-2025-54135 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54135 · Security Note
• https://github.com/cursor/cursor · Note
• https://twitter.com/gossy_84/status/1952263262810026229 · Twitter Post
• https://twitter.com/w00tcake/status/1964074009902928227 · Twitter Post
• https://twitter.com/Komodosec/status/1964871196018946197 · Twitter Post
• https://twitter.com/securityRSS/status/1951373087007477883 · Twitter Post
• https://twitter.com/pcasano/status/1953092204731482345 · Twitter Post
• https://twitter.com/CCBalert/status/1952350021598282062 · Twitter Post
• https://t.me/pentestingnews/65649 · Telegram Post
• https://twitter.com/TechMash365/status/1953305131996594410 · Twitter Post
• https://cursorhistory.com/versions/1.3.9 · Note