{"data":{"id":"7ae655d6-8b94-46ed-9c0e-5b8e469d4e33","title":"CVE-2025-64108: Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a…","summary":"CVE-2025-64108 affects Cursor, a code editor built for programming with AI, in versions 1.7.44 and below. Various NTFS path quirks let a prompt injection attacker bypass sensitive file protections and overwrite files that Cursor normally requires human approval to overwrite. Modifying some of these protected files can lead to RCE, and the issue must be chained with a prompt injection or malicious model attack and only affects systems supporting NTFS.","solution":"Fixed in version 2.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-64108","publishedAt":"2025-11-04T23:15:44.470Z","cveId":"CVE-2025-64108","cweIds":["CWE-22","CWE-94"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Cursor"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Cursor NTFS path quirks allow file overwrite via prompt injection","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00485,"epssCheckedAt":"2026-11-04T12:08:33.434Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T06:10:37.323Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126","CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","safety"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}