VYPR
← All advisories
Critical severity9.6NVD Advisory· Published Aug 2, 2025· Updated Jun 17, 2026

CVE-2025-54133

CVE-2025-54133

Description

Cursor is a code editor built for programming with AI. In versions 1.17 through 1.2, there is a UI information disclosure vulnerability in Cursor's MCP (Model Context Protocol) deeplink handler, allowing attackers to execute 2-click arbitrary system commands through social engineering attacks. When users click malicious cursor://anysphere.cursor-deeplink/mcp/install links, the installation dialog does not show the arguments being passed to the command being run. If a user clicks a malicious deeplink, then examines the installation dialog and clicks through, the full command including the arguments will be executed on the machine. This is fixed in version 1.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Anysphere/Cursor
    cpe:2.3:a:anysphere:cursor:*:*:*:*:*:*:*:*
    Range: >=1.1.7,<1.3
  • Getcursor/Cursorllm-create2 versions
    1.17 - 1.2+ 1 more
    • (no CPE)range: 1.17 - 1.2
    • (no CPE)range: >= 1.17, < 1.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.