VYPR
← All advisories
Medium severity6.4NVD Advisory· Published Aug 1, 2025· Updated Jun 17, 2026

CVE-2025-54131

CVE-2025-54131

Description

Cursor is a code editor built for programming with AI. In versions below 1.3, an attacker can bypass the allow list in auto-run mode with a backtick (`) or $(cmd). If a user has swapped Cursor from its default settings (requiring approval for every terminal call) to an allowlist, an attacker can execute arbitrary command execution outside of the allowlist without user approval. An attacker can trigger this vulnerability if chained with indirect prompt injection. This is fixed in version 1.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Anysphere/Cursor
    cpe:2.3:a:anysphere:cursor:*:*:*:*:*:*:*:*
    Range: <1.3
  • Getcursor/Cursorllm-create2 versions
    <1.3+ 1 more
    • (no CPE)range: <1.3
    • (no CPE)range: < 1.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.