CVE-2025-64106 - CVE House
Back to Database
Status published High CVE-2025-64106

Cursor: Speedbump Modal Bypass in MCP Server Deep-Link

Vulnerability Description

Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor's MCP server installation enables specially crafted deep-links to bypass the standard security warnings and conceal executed commands from users if they choose to accept the server. If an attacker is able to convince a victim to navigate to a malicious deeplink, the victim will not see the correct speedbump modal, and if they choose to accept, will execute commands specified by the attackers deeplink.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-64106

Credits & Attribution

No credits recorded in the NVD database.

References

More from cursor

View All →
CVE-2025-64110
Cursor: Authentication Bypass Possible via New Cursorignore Write
High 8.7
CVE-2025-64109
Cursor CLI Beta: Command Injection via Untrusted MCP Configuration
High 8.8
CVE-2025-64108
Cursor's Sensitive File Modification can Lead to NTFS Path Quirks
High 8.8
CVE-2025-64107
Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows
High 8.8
CVE-2025-62354
Improper neutralization of special elements used in an OS command...
Critical 9.8

Affected Vendor

Affected Software

cursor
Vulnerable Versions:
< 2.0

Timeline

Official Publish: November 4th, 2025
Last Modified: November 5th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-78

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1005 Data from Local System
Collection
T1041 Exfiltration Over C2 Channel
Exfiltration