Cursor’s AI coding agent morphed ‘into local shell’ with one
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-54135 | Cursor: Cursor allows writing in-workspace files with no user approval in versions below 1.3.9, If the file is a dotfile, editing it… | 9.8 | 2% |
From the original article
3 min read at cyberscoop.com
The flaw, disclosed a month after it was patched, provided an attacker with remote code execution privileges by poisoning the data ingested by the model. Threat researchers at AimLabs on Friday disclosed a data-poisoning attack affecting the AI-powered code editing software Cursor that would have given an attacker remote code execution privileges over user devices.
By @CyberScoopNews · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.