{"data":{"id":"8699a3d7-fec6-42c5-9001-f4d890514ef6","title":"CVE-2025-49150: Cursor is a code editor built for programming with AI. Prior to 0.51.0, by default, the setting…","summary":"Cursor, an AI code editor, prior to 0.51.0 enabled json.schemaDownload.enable by default. An attacker who can write a JSON file can trigger an arbitrary HTTP GET request without user confirmation. A malicious Cursor Agent, for example after a successful prompt injection, could send such a request to an attacker-controlled URL and exfiltrate data the agent can access.","solution":"Fixed in 0.51.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-49150","publishedAt":"2025-06-11T18:15:26.400Z","cveId":"CVE-2025-49150","cweIds":["CWE-200"],"cvssScore":"5.9","cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Cursor"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Cursor code editor JSON schema download allows unconfirmed HTTP GET requests","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00383,"epssCheckedAt":"2026-11-04T12:08:33.950Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:33.679Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-116"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}