https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T03:07:52.435279+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-254120 EUVD-2026-254120 2026-10-06T03:07:52.466988+00:00 EUVD-2026-254120 https://cve.radiocsirt.org/vuln/fkie_cve-2025-61593 fkie_cve-2025-61593 2026-10-06T03:07:52.467022+00:00

Cursor is a code editor built for programming with AI. In versions 1.7 and below, a vulnerability in the way Cursor CLI Agent protects its sensitive files (i.e. */.cursor/cli.json) allows attackers to modify the content of the files through prompt injection, thus achieving remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive filesystems. This issue is fixed in a commit, 25b418f, but has yet to be released as of October 3, 2025.