CVE-2025-61593 Cursor CLI Agent: Sensitive File Overwrite Bypass

What is CVE-2025-61593?

CVE-2025-61593 is a high-severity code injection vulnerability in cursor, published on 3 Oct 2025. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

Cursor is a code editor built for programming with AI. In versions 1.7 and below, a vulnerability in the way Cursor CLI Agent protects its sensitive files (i.e. */.cursor/cli.json) allows attackers to modify the content of the files through prompt injection, thus achieving remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive filesystems. This issue is fixed in a commit, 25b418f, but has yet to be released as of October 3, 2025.

Weakness: CWE-94, CWE-178

Which versions are affected by CVE-2025-61593?

It affects 1 product.

Products include Anysphere Cursor.

How do I fix CVE-2025-61593?

No fix has been published for CVE-2025-61593 yet. Limit exposure of the affected software until one is available.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2025-61593 being exploited?

There is no known exploitation of CVE-2025-61593 in the wild and no public exploit code.

Other vulnerabilities in cursor

• CVE-2026-50548 Cursor Desktop sandbox escape via agent-controlled working directory Critical 9.3
• CVE-2026-50549 Cursor Desktop sandbox escape via symlink and failed path canonicalization Critical 9.3
• CVE-2025-64106 Cursor: Speedbump Modal Bypass in MCP Server Deep-Link High 8.8
• CVE-2025-64107 Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows High 8.8
• CVE-2025-64108 Cursor's Sensitive File Modification can Lead to NTFS Path Quirks High 8.8

Sources

• CVE record
• NVD
• OSV
• How this page is made