{"data":{"id":"0bb5c571-ba49-4bc8-a8f3-ef535a15c44e","title":"CVE-2025-32018: Cursor is a code editor built for programming with AI. In versions 0.45.0 through 0.48.6, the Cursor app introduced a…","summary":"CVE-2025-32018 affects the Cursor code editor in versions 0.45.0 through 0.48.6. A regression let the Cursor Agent automatically write to files outside the opened workspace when prompted, directly or through maliciously crafted context. Exploitation required deliberate prompting, and the edited file still appeared in the UI for user review.","solution":"This vulnerability is fixed in 0.48.7.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-32018","publishedAt":"2025-04-08T16:15:27.487Z","cveId":"CVE-2025-32018","cweIds":["CWE-22"],"cvssScore":"8","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Cursor"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Cursor agent writes to files outside the opened workspace","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00418,"epssCheckedAt":"2026-11-04T18:09:13.788Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:41.920Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[]}}