{"id":87096,"date":"2026-06-11T09:55:53","date_gmt":"2026-06-11T09:55:53","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T00:00:00","slug":"cve-2025-61590-remote-code-execution-vulnerability-in-cursor-code-editor","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-61590-remote-code-execution-vulnerability-in-cursor-code-editor\/","title":{"rendered":"CVE-2025-61590: Remote Code Execution Vulnerability in Cursor Code Editor<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

CVE-2025-61590 is a critical security vulnerability found in Cursor, a code editor built for programming with AI. This vulnerability primarily affects users of versions 1.6 and below and enables an attacker to execute remote code through Visual Studio Code Workspaces. Such a vulnerability makes it possible for potential system compromise or data leakage, emphasizing the need for immediate attention and mitigation.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-61590
\nSeverity: High (7.5 CVSS Score)
\nAttack Vector: Remote
\nPrivileges Required: Low
\nUser Interaction: Required
\nImpact: Remote Code Execution leading to system compromise and potential data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Cursor Code Editor | 1.6 and below<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The vulnerability is due to an issue with Cursor’s handling of Visual Studio Code Workspaces. These workspaces permit users to open multiple folders and save particular settings, creating an untitled workspace automatically. If an attacker successfully hijacks the chat context of the victim, for example, through a compromised MCP server, they can prompt the Cursor Agent to write into this file and alter the workspace. This action bypasses CVE-2025-54130, enabling an attacker to carry out a Remote Code Execution by writing to the settings section.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

Given the nature of the vulnerability, an example of a potential exploit might involve a malicious actor injecting a payload through a compromised MCP server. This could be conceptually represented like this:<\/p>\n

\/\/ Attacker hijacks the chat context\nhijack_chat_context(victim, compromised_MCP_server);\n\/\/ Attacker injects payload to modify .code-workspace file\ninject_payload(\"untitled.code-workspace\", \"malicious_payload\");\n\/\/ Attacker triggers RCE by writing to the settings section\ntrigger_rce(\"settings.json\");<\/code><\/pre>\n
Please note that this is a conceptual representation and does not represent actual exploitation code.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview CVE-2025-61590 is a critical security vulnerability found in Cursor, a code editor built for programming with AI. This vulnerability primarily affects users of versions 1.6 and below and enables an attacker to execute remote code through Visual Studio Code Workspaces. Such a vulnerability makes it possible for potential system compromise or data leakage, emphasizing […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-87096","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t