CVE-2025-64108 Details
Description
Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a prompt injection attacker to circumvent sensitive file protections and overwrite files which Cursor requires human approval to overwrite. Modification of some of the protected files can lead to RCE. Must be chained with a prompt injection or malicious model attach. Only affects systems supporting NTFS. This issue is fixed in version 2.0.
A vulnerability in the Cursor code editor, affecting versions through 1.7.44 on NTFS-supporting systems, allows prompt injection attackers to bypass file protection mechanisms. This exploitation can lead to unauthorized modification of files that typically require human approval, with some changes potentially causing remote code execution. The issue arises from certain NTFS path characteristics that disrupt Cursor's path validation, enabling the alteration of protected files without proper oversight.
Users should update to Cursor version 2.0, where this vulnerability has been addressed. In the patched version, NTFS paths are normalized before any protective measures are applied.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 5, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/cursor/cursor/security/advisories/GHSA-6r98-6qcw-rxrw | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| anysphere cursor | < 2.0 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 10, 2025 | Initial Analysis | [email protected] |
| Nov 4, 2025 | New CVE Received | [email protected] |