https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:11:29.056564+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-59944 CVE-2025-59944 — Cursor IDE: Sensitive File Overwrite Bypass is Possible 2026-10-07T09:11:29.072061+00:00

Affected: cursor

Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files (e.g., */.cursor/mcp.json), which allows attackers to modify the content of these files through prompt injection and achieve remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive fileystems. This issue is fixed in version 1.7.