CVE-2025-54131: Cursor bypasses its allow list to execute arbitrary commands
Cursor is a code editor built for programming with AI. In versions below 1.3, an attacker can bypass the allow list in auto-run mode with a backtick () or $(cmd). If a user has swapped Cursor from its default settings (requiring approval for every terminal call) to an allowlist, an attacker can execute arbitrary command execution outside of the allowlist without user approval. An attacker can trigger this vulnerability if chained with indirect prompt injection. This is fixed in version 1.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54131?
The severity of CVE-2025-54131 is classified as high due to the potential for attackers to execute commands without approval.
How do I fix CVE-2025-54131?
To fix CVE-2025-54131, update Cursor to version 1.3 or higher to ensure proper security measures are in place.
What techniques can an attacker use to exploit CVE-2025-54131?
An attacker can exploit CVE-2025-54131 by bypassing the allow list in auto-run mode using a backtick (`) or $(cmd) command.
Who is affected by CVE-2025-54131?
Users of Cursor versions below 1.3 who have swapped from default settings to an allowlist are affected by CVE-2025-54131.
What is the nature of the vulnerability in CVE-2025-54131?
CVE-2025-54131 is a vulnerability that allows unauthorized command execution due to improper validation of terminal commands in auto-run mode.