AI safety & securitymedium
Cursor AI Code Editor Fixed Flaw Allowing Attackers to Run Commands via Prompt Injection
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-54135 | Cursor: Cursor allows writing in-workspace files with no user approval in versions below 1.3.9, If the file is a dotfile, editing it… | 9.8 | 2% |
From the original article
4 min read at thehackernews.com
Cybersecurity researchers have disclosed a now-patched, high-severity security flaw in Cursor, a popular artificial intelligence (AI) code editor, that could result in remote code execution (RCE). The vulnerability, tracked as CVE-2025-54135 (CVSS score: 8. 6), has been addressed in version 1.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.