How severe is CVE-2025-54130?

CVE-2025-54130 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with high attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2025-54130 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (18th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-54130?

CVE-2025-54130 affects Anysphere Cursor. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-54130?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

Does CVE-2025-54130 have an EU (EUVD) identifier?

Yes. CVE-2025-54130 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-23568.

When was CVE-2025-54130 published?

CVE-2025-54130 was published on 2025-08-05 and last updated on 2026-06-17.

CVE-2025-54130

CVE-2025-54130 is a high-severity vulnerability in Anysphere Cursor with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-285.

Key facts

Severity: High (CVSS 3.x base score 7.5)
EPSS exploit prediction: 0% (18th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-23568
Weakness: CWE-285
Affected product: Anysphere Cursor
Published: 2025-08-05
Last modified: 2026-06-17

Description

Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions less than 1.3.9. If the file is a dotfile, editing it requires approval but creating a new one doesn't. Hence, if sensitive editor files, such as the .vscode/settings.json file don't already exist in the workspace, an attacker can chain a indirect prompt injection vulnerability to hijack the context to write to the settings file and trigger RCE on the victim without user approval. This is fixed in version 1.3.9.

Frequently asked questions

What is CVE-2025-54130?: Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions less than 1.3.9. If the file is a dotfile, editing it requires approval but creating a new one doesn't. Hence, if sensitive editor files, such as the .vscode/settings.json file don't already exist in the workspace, an attacker can chain a indirect prompt injection vulnerability to hijack the context to write to the settings file and trigger RCE on the victim without user approval. This is fixed in version 1.3.9.
How severe is CVE-2025-54130?: CVE-2025-54130 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with high attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2025-54130 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (18th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-54130?: CVE-2025-54130 affects Anysphere Cursor. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-54130?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
Does CVE-2025-54130 have an EU (EUVD) identifier?: Yes. CVE-2025-54130 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-23568.
When was CVE-2025-54130 published?: CVE-2025-54130 was published on 2025-08-05 and last updated on 2026-06-17.

References

https://github.com/cursor/cursor/security/advisories/GHSA-vqv7-vq92-x87f

Affected products (1)

cpe:2.3:a:anysphere:cursor:*:*:*:*:*:*:*:*

More vulnerabilities in Anysphere Cursor

CVE-2026-50549 — Critical (CVSS 9.8): Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox…
CVE-2026-50548 — Critical (CVSS 9.8): Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox…
CVE-2026-22708 — Critical (CVSS 9.8): Cursor is a code editor built for programming with AI. Prior to 2.3, hen the Cursor Agent is running in Auto-Run Mode…
CVE-2025-54133 — Critical (CVSS 9.6): Cursor is a code editor built for programming with AI. In versions 1.17 through 1.2, there is a UI information…
CVE-2026-31854 — High (CVSS 8.8): Cursor is a code editor built for programming with AI. Prior to 2.0 ,if a visited website contains maliciously crafted…
CVE-2025-64108 — High (CVSS 8.8): Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a…

All CVEs affecting Anysphere Cursor →

Other CWE-285 (Improper Authorization) vulnerabilities

CVE-2025-65041 — Critical (CVSS 10.0): Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
CVE-2023-33189 — Critical (CVSS 10.0): Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization…
CVE-2022-2595 — Critical (CVSS 10.0): Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1.
CVE-2021-28799 — Critical (CVSS 10.0): An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If…
CVE-2026-34048 — Critical (CVSS 9.9): Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to…
CVE-2026-5412 — Critical (CVSS 9.9): In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controller facade. An authenticated…

Browse all CWE-285 (Improper Authorization) vulnerabilities →