PT-2025-31883 · Cursor · Cursor

Maccarita · Published 2025-08-05 · Updated 2025-08-10 · CVE-2025-54130

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cursor versions prior to 1.3.9

Description Cursor, a code editor built for programming with AI, allows writing in-workspace files without user approval in affected versions. Specifically, creating new dotfiles does not require approval, while editing existing ones does. This allows an attacker to chain an indirect prompt injection vulnerability to hijack the context and write to sensitive editor files, such as the .vscode/settings.json file, potentially triggering Remote Code Execution (RCE) on the victim's machine without user approval.

Recommendations Update to version 1.3.9 or later.

Exploit

Fix

RCE

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2025-54130

GHSA-VQV7-VQ92-X87F

Affected Products

Cursor

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54130.json · Exploit
• https://github.com/cursor/cursor/security/advisories/GHSA-vqv7-vq92-x87f · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54130 · Security Note
• https://osv.dev/vulnerability/CVE-2025-54130 · Vendor Advisory
• https://twitter.com/CVEnew/status/1952539706102890948 · Twitter Post
• https://t.me/cveNotify/130863 · Telegram Post
• https://t.me/CVEtracker/29148 · Telegram Post
• https://twitter.com/cracbot/status/1954498000023159258 · Twitter Post