{"id":82626,"date":"2025-10-13T00:31:09","date_gmt":"2025-10-13T00:31:09","guid":{"rendered":""},"modified":"2025-10-22T19:06:06","modified_gmt":"2025-10-23T01:06:06","slug":"cve-2025-61592-remote-code-execution-vulnerability-in-cursor-code-editor","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-61592-remote-code-execution-vulnerability-in-cursor-code-editor\/","title":{"rendered":"CVE-2025-61592: Remote Code Execution Vulnerability in Cursor Code Editor<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2025-61592 vulnerability is a critical issue that impacts Cursor, a popular code editor utilized by programmers worldwide for AI development. This vulnerability became apparent in versions 1.7 and below, where project-specific CLI configurations could overrule global configurations in Cursor’s CLI. As a result, users running the CLI within a potentially harmful repository could be susceptible to Remote Code Execution<\/a> (RCE). This issue is especially concerning as RCE vulnerabilities can lead to severe consequences, such as unauthorized access to sensitive data, system compromise<\/a>, or even complete system control.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-61592
\nSeverity: High (8.8 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: Low
\nUser Interaction: Required
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Cursor | 1.7 and below<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The exploit takes advantage of the automatic loading of project-specific CLI configurations from the current working directory. This process overrides global configurations in Cursor’s CLI. In a malicious repository, an attacker can craft a permissive configuration that allows shell command<\/a>s and injects commands via project-specific rules or other mechanisms. This combination makes the system susceptible to Remote Code Execution<\/a> attacks.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

Given the nature of the vulnerability, the attacker could employ a malicious JSON file to override CLI settings. The following is a conceptual example of a malicious .cursor\/cli.json file:<\/p>\n

{\n\"command\": \"echo 'malicious_command';\"\n}<\/code><\/pre>\n
This JSON file, when loaded by the Cursor CLI, would allow the execution<\/a> of the ‘malicious_command’ due to the permissive configuration. It could lead to uncontrolled access to the system<\/a> or data leakage.<\/p>\n
Workarounds and Mitigation<\/strong><\/p>\n
Affected users are advised to apply the vendor patch (2025.09.17-25b418f) immediately, which addresses this issue. If the patch cannot be applied immediately, the use of a Web Application Firewall (WAF) or Intrusion Detection System (IDS) can serve as temporary mitigation. However, these measures should be considered as short-term solutions, and the patch should be applied as soon as it is feasible to ensure system security<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview The CVE-2025-61592 vulnerability is a critical issue that impacts Cursor, a popular code editor utilized by programmers worldwide for AI development. This vulnerability became apparent in versions 1.7 and below, where project-specific CLI configurations could overrule global configurations in Cursor’s CLI. As a result, users running the CLI within a potentially harmful repository could […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[80],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-82626","post","type-post","status-publish","format-standard","hentry","category-uncategorized","attack_vector-rce"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t