PT-2025-45063 · Cursor · Cursor

Published 2025-11-04 · Updated 2025-11-10 · CVE-2025-64109

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cursor versions prior to 2025.09.17-25b418f

Description Cursor is a code editor designed for programming with AI. A flaw in the Cursor CLI Beta could allow a remote attacker to execute code. This is possible through the Model Context Protocol (MCP) server mechanism by uploading a malicious MCP configuration file, named .cursor/mcp.json, to a GitHub repository. When a user clones the repository and opens it with the Cursor CLI, the command to start the malicious MCP server is executed immediately without any warning, potentially leading to code execution.

Recommendations Update to version 2025.09.17-25b418f or later.

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-64109

Affected Products

Cursor

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-64109 · Security Note
• https://github.com/cursor/cursor/security/advisories/GHSA-4hwr-97q3-37w2 · Note
• https://twitter.com/cracbot/status/1987837678872842641 · Twitter Post
• https://t.me/CVEtracker/36567 · Telegram Post