Cursor up to 1.7 CLI Agent /.cursor/cli.json case sensitivity

Summaryinfo

A vulnerability was found in Cursor up to 1.7. It has been classified as problematic. Affected is an unknown function of the file /.cursor/cli.json of the component CLI Agent. Performing a manipulation results in case sensitivity. This vulnerability is cataloged as CVE-2025-61593. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Cursor up to 1.7. This affects an unknown code block of the file /.cursor/cli.json of the component CLI Agent. The manipulation with an unknown input leads to a case sensitivity vulnerability. CWE is classifying the issue as CWE-178. The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Cursor is a code editor built for programming with AI. In versions 1.7 and below, a vulnerability in the way Cursor CLI Agent protects its sensitive files (i.e. */.cursor/cli.json) allows attackers to modify the content of the files through prompt injection, thus achieving remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive filesystems. This issue is fixed in a commit, 25b418f, but has yet to be released as of October 3, 2025.

It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2025-61593 since 09/26/2025. The exploitability is told to be difficult. It is possible to initiate the attack remotely. Technical details of the vulnerability are known, but there is no available exploit.

By approaching the search of inurl:.cursor/cli.json it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-32310). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Name

• Cursor

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7

Website

• Product: https://github.com/cursor/cursor/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion