{"data":{"id":"790c0f7a-3ef8-4101-8e37-7b5b9ff26ee4","title":"CVE-2025-54131: Cursor is a code editor built for programming with AI. In versions below 1.3, an attacker can bypass the allow list in…","summary":"CVE-2025-54131 affects Cursor, a code editor built for programming with AI, in versions below 1.3. When a user has switched from the default approval-for-every-terminal-call setting to an allowlist, an attacker can bypass the allow list in auto-run mode using a backtick (`) or $(cmd) and execute arbitrary commands without user approval. The flaw can be triggered when chained with indirect prompt injection.","solution":"This is fixed in version 1.3.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-54131","publishedAt":"2025-08-01T23:15:24.537Z","cveId":"CVE-2025-54131","cweIds":["CWE-77"],"cvssScore":"6.4","cvssSeverity":"medium","severity":"medium","attackType":["jailbreak","prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Cursor"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Cursor allow list bypass in auto-run mode via backtick or command substitution","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00538,"epssCheckedAt":"2026-11-04T12:08:33.434Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T18:09:30.055Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051","AML.T0054"],"fixes":[]}}