CVE-2025-59944 Cursor IDE: Sensitive File Overwrite Bypass is Possible

What is CVE-2025-59944?

CVE-2025-59944 is a high-severity path traversal vulnerability in cursor, published on 3 Oct 2025. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files (e.g., */.cursor/mcp.json), which allows attackers to modify the content of these files through prompt injection and achieve remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive fileystems. This issue is fixed in version 1.7.

Weakness: CWE-178

Which versions are affected by CVE-2025-59944?

It affects 1 product.

Products include Anysphere Cursor.

How do I fix CVE-2025-59944?

No fix has been published for CVE-2025-59944 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2025-59944 being exploited?

There is no known exploitation of CVE-2025-59944 in the wild and no public exploit code.

Other vulnerabilities in cursor

• CVE-2026-50548 Cursor Desktop sandbox escape via agent-controlled working directory Critical 9.3
• CVE-2026-50549 Cursor Desktop sandbox escape via symlink and failed path canonicalization Critical 9.3
• CVE-2025-64106 Cursor: Speedbump Modal Bypass in MCP Server Deep-Link High 8.8
• CVE-2025-64107 Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows High 8.8
• CVE-2025-64108 Cursor's Sensitive File Modification can Lead to NTFS Path Quirks High 8.8

Sources

• CVE record
• NVD
• OSV
• How this page is made