CVE-2025-62354: OS Command Injection
Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arbitrary code execution.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62354?
The severity of CVE-2025-62354 is critical with a CVSS score of 9.8.
What kind of vulnerability is CVE-2025-62354?
CVE-2025-62354 is an OS command injection vulnerability that allows unauthorized execution of commands.
How do I fix CVE-2025-62354?
To fix CVE-2025-62354, ensure that all user inputs are properly sanitized and implement strict whitelisting of allowed commands.
What are the potential impacts of CVE-2025-62354?
The potential impacts of CVE-2025-62354 include arbitrary code execution, which can lead to data breaches and system compromise.
Who is affected by CVE-2025-62354?
CVE-2025-62354 affects systems using the Cursor framework that do not adequately validate user input for command execution.