CVE-2025-64106: Cursor: Speedbump Modal Bypass in MCP Server Deep-Link
Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor's MCP server installation enables specially crafted deep-links to bypass the standard security warnings and conceal executed commands from users if they choose to accept the server. If an attacker is able to convince a victim to navigate to a malicious deeplink, the victim will not see the correct speedbump modal, and if they choose to accept, will execute commands specified by the attackers deeplink.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-64106?
CVE-2025-64106 has been classified with a moderate severity due to the potential for input validation flaws allowing bypass of security warnings.
How do I fix CVE-2025-64106?
To fix CVE-2025-64106, users should upgrade to Cursor version 1.7.29 or later to address the input validation flaw.
What vulnerabilities are associated with CVE-2025-64106?
CVE-2025-64106 specifically involves an input validation vulnerability within the MCP server installation of Cursor.
Who is affected by CVE-2025-64106?
Users of Cursor versions 1.7.28 and below are affected by CVE-2025-64106 due to the identified security flaw.
What attack vectors are possible with CVE-2025-64106?
CVE-2025-64106 allows attackers to create specially crafted deep-links that can conceal executed commands from users.