PT-2025-31699 · Cursor · Cursor

Yellowday60-Git · Published 2025-08-01 · Updated 2025-08-02 · CVE-2025-54131

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cursor versions prior to 1.3

Description Cursor, a code editor built for programming with AI, allows an attacker to bypass the allow list in auto-run mode using a backtick (`) or $(cmd). This bypass enables arbitrary command execution outside of the allowlist without user approval, provided the user has modified default settings to use an allowlist instead of requiring approval for each terminal call. The issue can be triggered if chained with indirect prompt injection.

Recommendations Update to version 1.3 or later.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2025-54131

GHSA-534M-3W6R-8PQR

Affected Products

Cursor

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54131.json · Exploit
• https://github.com/cursor/cursor/security/advisories/GHSA-534m-3w6r-8pqr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54131 · Security Note
• https://osv.dev/vulnerability/CVE-2025-54131 · Vendor Advisory
• https://t.me/cveNotify/130634 · Telegram Post
• https://twitter.com/CVEnew/status/1951426614178246732 · Twitter Post
• https://t.me/CVEtracker/28986 · Telegram Post