CVE Explorer

CVE-2025-64108

Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a prompt injection attacker to circumvent sensitive file protections and overwrite files which Cursor requires human approval to overwrite. Modification of some of the protected files can lead to RCE. Must be chained with a prompt injection or malicious model attach. Only affects systems supporting NTFS. This issue is fixed in version 2.0.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:f37b90485d31c96a8b774c8d2b3ff789213e72642c6a12087353dabb9c3b3e32

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

cwe · 2 assertions

{"cweId":"CWE-22","description":"CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:937d621866a857a2ccd0819393ae7364e7593508d4dfb2ae596fe122cf8c0461 · sha256:f28c180a931b8068… · /containers/cna/problemTypes/0/descriptions/0

{"cweId":"CWE-94","description":"CWE-94: Improper Control of Generation of Code ('Code Injection')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:937d621866a857a2ccd0819393ae7364e7593508d4dfb2ae596fe122cf8c0461 · sha256:f28c180a931b8068… · /containers/cna/problemTypes/1/descriptions/0

Affected products and versions

1 source assertion

{"product":"cursor","vendor":"cursor","versions":[{"status":"affected","version":"< 2.0"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:937d621866a857a2ccd0819393ae7364e7593508d4dfb2ae596fe122cf8c0461 · sha256:f28c180a931b8068… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:937d621866a857a2ccd0819393ae7364e7593508d4dfb2ae596fe122cf8c0461 · sha256:f28c180a931b8068… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

2 source assertions

{"cweId":"CWE-22","description":"CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:937d621866a857a2ccd0819393ae7364e7593508d4dfb2ae596fe122cf8c0461 · sha256:f28c180a931b8068… · /containers/cna/problemTypes/0/descriptions/0

{"cweId":"CWE-94","description":"CWE-94: Improper Control of Generation of Code ('Code Injection')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:937d621866a857a2ccd0819393ae7364e7593508d4dfb2ae596fe122cf8c0461 · sha256:f28c180a931b8068… · /containers/cna/problemTypes/1/descriptions/0

Source references

1 source assertion

{"name":"https://github.com/cursor/cursor/security/advisories/GHSA-6r98-6qcw-rxrw","tags":["x_refsource_CONFIRM"],"url":"https://github.com/cursor/cursor/security/advisories/GHSA-6r98-6qcw-rxrw"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:937d621866a857a2ccd0819393ae7364e7593508d4dfb2ae596fe122cf8c0461 · sha256:f28c180a931b8068… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer