CVE-2025-54135

Katalog CVE

CVSS 9.8 · Critical EPSS 1,8%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada anysphere cursor. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions below 1.3.9, If the file is a dotfile, editing it requires approval but creating a new one doesn't. Hence, if sensitive MCP files, such as the .cursor/mcp.json file don't already exist in the workspace, an attacker can chain a indirect prompt injection vulnerability to hijack the context to write to the settings file and trigger RCE on the victim without user approval. This is fixed in version 1.3.9.

Rincian

Terbit di NVD

5 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-829: Inclusion of Functionality from Untrusted Control Sphere

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 78,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/cursor/cursor/security/advisories/GHSA-4cxx-hrm3-49rm mitigasi · advisory vendor