{"data":{"id":"0c8b9c1e-64de-4abd-aace-95a244333369","title":"CVE-2025-61589: Cursor is a code editor built for programming with AI. In versions 1.6 and below, Mermaid (a to render diagrams) allows…","summary":"CVE-2025-61589 affects Cursor, a code editor built for programming with AI, in versions 1.6 and below. Mermaid diagram rendering allows embedded images that Cursor renders in the chat box, and an attacker can use this after a successful prompt injection to exfiltrate sensitive information to an attacker-controlled server through an image fetch. A malicious model, hallucination or backdoor might also trigger the exploit, and the issue requires prompt injection from malicious data such as web content, image uploads or source code. Additional bypasses not covered by the initial fix were found and are described in GHSA-43wj-mwcc-x93p.","solution":"Fixed in version 1.7.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-61589","publishedAt":"2025-10-03T07:15:45.470Z","cveId":"CVE-2025-61589","cweIds":["CWE-200"],"cvssScore":"5.9","cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection","data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Cursor","Mermaid"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Cursor data exfiltration through Mermaid image rendering in chat","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00294,"epssCheckedAt":"2026-11-04T18:09:13.788Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T12:08:41.051Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-116"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}