PT-2025-40459 · Mermaid+1 · Mermaid+1

Maccarita + 1 · Published 2025-10-03 · Updated 2025-10-20 · CVE-2025-61589

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cursor versions 1.6 and below

Description Cursor, a code editor for programming with AI, has an issue where Mermaid, used for rendering diagrams, allows embedding images. This can be exploited to exfiltrate sensitive information to a third-party attacker-controlled server through an image fetch, following a successful prompt injection. A malicious model or backdoor could also trigger this exploit. The issue requires prompt injection from malicious data such as web content, image uploads, or source code to be successfully exploited. The image fetch mechanism is used to transmit data to an external server controlled by the attacker.

Recommendations Update to version 1.7 or later.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-61589

GHSA-43WJ-MWCC-X93P

GHSA-XW2X-252G-97W2

Affected Products

Cursor

Mermaid

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61589.json · Exploit
• https://github.com/cursor/cursor/security/advisories/GHSA-xw2x-252g-97w2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61589 · Security Note
• https://osv.dev/vulnerability/CVE-2025-61589 · Vendor Advisory
• https://github.com/cursor/cursor/security/advisories/GHSA-43wj-mwcc-x93p · Note
• https://t.me/cveNotify/139496 · Telegram Post
• https://t.me/CVEtracker/33997 · Telegram Post
• https://twitter.com/CVEnew/status/1974010271082414328 · Twitter Post