sbomify Insights

Search by CVE or GitHub advisory id, package name or title.

CVE-2025-61589 Cursor: Potential Information Leakage via Mermaid Diagram

Medium 5.9 Published Updated

Attackers can exfiltrate sensitive data to external servers via Mermaid diagram image fetches triggered by prompt injection in Cursor.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2025-61589?

CVE-2025-61589 is a medium-severity vulnerability in cursor, published on 3 Oct 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Cursor is a code editor built for programming with AI. In versions 1.6 and below, Mermaid (a to render diagrams) allows embedding images which then get rendered by Cursor in the chat box. An attacker can use this to exfiltrate sensitive information to a third-party attacker controlled server through an image fetch after successfully performing a prompt injection. A malicious model (or hallucination/backdoor) might also trigger this exploit at will. This issue requires prompt injection from malicious data (web, image upload, source code) in order to exploit. In that case, it can send sensitive information to an attacker-controlled external server. Some additional bypasses not covered in the initial fix to this issue were discovered, see GHSA-43wj-mwcc-x93p. This issue is fixed in version 1.7.

Weakness: CWE-200

Which versions are affected by CVE-2025-61589?

It affects 1 product.

Products include Anysphere Cursor.

How do I fix CVE-2025-61589?

No fix has been published for CVE-2025-61589 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-61589 being exploited?

There is no known exploitation of CVE-2025-61589 in the wild and no public exploit code.

Sources

Is CVE-2025-61589 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free