{"data":{"id":"ff819804-b347-423f-a18e-af570fe6390b","title":"CVE-2024-48919: Cursor is a code editor built for programming with AI. Prior to Sep 27, 2024, if a user generated a terminal command…","summary":"CVE-2024-48919 affects Cursor, a code editor built for programming with AI. Before September 27, 2024, an attacker controlling a web page that a user explicitly imported into the Terminal Cmd-K prompt could influence a language model to output arbitrary commands for execution in the user's terminal. Exploitation required the user to opt in to including the compromised page's contents and the attacker to embed prompt injection text in that page.","solution":"A server-side patch stopped streaming back newlines or control characters, released September 27, 2024. Cursor 0.42 adds client-side mitigations that prevent newlines or control characters from being streamed into the terminal directly, and a new setting, \"cursor.terminal.usePreviewBox\", which when set to true streams the response into a preview box that must be manually accepted before insertion into the terminal. The server-side patch applies to older versions of Cursor, so no additional action is needed for it. Cursor's maintainers also recommend including only trusted pieces of context in prompts.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-48919","publishedAt":"2024-10-22T21:15:06.813Z","cveId":"CVE-2024-48919","cweIds":["CWE-20"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Cursor"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Cursor terminal command generation prompt injection via imported web page","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00512,"epssCheckedAt":"2026-11-04T06:10:15.563Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T00:11:13.962Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}