Cursor Code Editor Cursor CLI Agent Sensitive File Overwrite Bypass Vulnerability Allowing Remote Code Execution

A vulnerability exists in the Cursor code editor's CLI Agent, specifically in versions prior to 2025.09.12-4852336. The issue arises from inadequate protection of sensitive files, such as the CLI configuration file, on case-insensitive filesystems. This flaw enables attackers to exploit prompt injection, modify the contents of these files, and achieve remote code execution. Although a fix has been implemented, it has not yet been released as of October 3, 2025.

Impact

Exploitation of this vulnerability allows for full remote code execution by modifying sensitive files through prompt injection, particularly on case-insensitive filesystems.

Remediation

Users can update to Cursor CLI version 2025.09.17-25b418f to address this vulnerability.