CVE-2025-59944 - CVE House
Back to Database
Status published High CVE-2025-59944

Cursor IDE: Sensitive File Overwrite Bypass is Possible

Vulnerability Description

Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files (e.g., */.cursor/mcp.json), which allows attackers to modify the content of these files through prompt injection and achieve remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive fileystems. This issue is fixed in version 1.7.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-59944

Credits & Attribution

No credits recorded in the NVD database.

References

More from cursor

View All →
CVE-2025-64110
Cursor: Authentication Bypass Possible via New Cursorignore Write
High 8.7
CVE-2025-64109
Cursor CLI Beta: Command Injection via Untrusted MCP Configuration
High 8.8
CVE-2025-64108
Cursor's Sensitive File Modification can Lead to NTFS Path Quirks
High 8.8
CVE-2025-64107
Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows
High 8.8
CVE-2025-64106
Cursor: Speedbump Modal Bypass in MCP Server Deep-Link
High 8.8

Affected Vendor

Affected Software

cursor
Vulnerable Versions:
< 1.7

Timeline

Official Publish: October 3rd, 2025
Last Modified: October 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-178

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.