CVE-2025-64107HIGH 8.8EPSS p21.9%

CVE-2025-64107CVE-2025-64107

Description

Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings may lead to RCE. Cursor detects path manipulation via forward slashes (./.cursor/./././././mcp.json etc.), and requires human approval to complete the operation. However, the same kind of manipulation using backslashes was not correctly detected, allowing an attacker who had already achieved prompt injection or some other level of control to overwrite sensitive editor files without approval on Windows machines. This issue is fixed in version 2.0.

Scoring

CVSS 3.18.8 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS0.30% probability of exploitation · percentile 21.9% · 2026-06-19T12:03:05Z
Published2025-11-04
Last modified2025-11-10

Underlying weaknesses· 1

CWE-22

References

  1. https://github.com/cursor/cursor/security/advisories/GHSA-2jr2-8wf5-v6pf

1

TypeTargetConfidenceTier
WeaknessImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')cwe-220%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-64108
CVE
CVE-2025-54135
CVE
CVE-2025-59944
CVE
CVE-2025-54130
CVE
CVE-2025-61593
CVE
CVE-2025-54136
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.