Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE…
GitHub_M·CWE-178·Published 2025-10-03
Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files (e.g., */.cursor/mcp.json), which allows attackers to modify the content of these files through prompt injection and achieve remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive fileystems. This issue is fixed in version 1.7.
Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files (e.g., */.cursor/mcp.json), which allows attackers to modify the content of these files through prompt injection and achieve remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive fileystems. This issue is fixed in version 1.7.
Cursor es un editor de código diseñado para programar con IA. Las versiones 1.6.23 e inferiores contienen comprobaciones sensibles a mayúsculas y minúsculas en la forma en que Cursor IDE protege sus archivos sensibles (p. ej., */.cursor/mcp.json), lo que permite a los atacantes modificar el contenido de estos archivos mediante inyección de prompts y lograr ejecución remota de código. Una inyección de prompts puede conducir a una RCE completa mediante la modificación de archivos sensibles en sistemas de archivos que no distinguen entre mayúsculas y minúsculas. Este problema se ha solucionado en la versión 1.7.
| Version | Type | Source | Base | Exp | Impact | Vector |
|---|---|---|---|---|---|---|
| 3.1 | Primary | NVD | 9.8 | 3.9 | 5.9 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | Primary | cve.org | 8.1 | — | — | CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H |
| 3.1 | Primary | cve.org | 8.1 | — | — | CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H |
| 3.1 | Secondary | NVD | 8.0 | 1.3 | 6.0 | CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H |