CVE-2025-64107: Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows
Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings may lead to RCE. Cursor detects path manipulation via forward slashes (./.cursor/./././././mcp.json etc.), and requires human approval to complete the operation. However, the same kind of manipulation using backslashes was not correctly detected, allowing an attacker who had already achieved prompt injection or some other level of control to overwrite sensitive editor files without approval on Windows machines. This issue is fixed in version 2.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-64107?
CVE-2025-64107 has been classified with a critical severity due to the potential for remote code execution.
How do I fix CVE-2025-64107?
To fix CVE-2025-64107, update Cursor to version 1.7.53 or later.
What causes CVE-2025-64107?
CVE-2025-64107 is caused by improper handling of internal settings that allow for path manipulation leading to remote code execution.
Which versions of Cursor are affected by CVE-2025-64107?
Versions of Cursor up to and including 1.7.52 are affected by CVE-2025-64107.
Is human approval necessary to exploit CVE-2025-64107?
Yes, exploiting CVE-2025-64107 requires human approval to manipulate internal settings.