HighVulnerabilityLLM-specific
CVE-2025-64108: Cursor NTFS path quirks allow file overwrite via prompt injection
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-64108
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.5%
Summary
CVE-2025-64108 affects Cursor, a code editor built for programming with AI, in versions 1.7.44 and below. Various NTFS path quirks let a prompt injection attacker bypass sensitive file protections and overwrite files that Cursor normally requires human approval to overwrite. Modifying some of these protected files can lead to RCE, and the issue must be chained with a prompt injection or malicious model attack and only affects systems supporting NTFS.
Mitigation
Fixed in version 2.0.
Topics
Related items
- InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
- InfoHow to Turn AI Red Team Findings Into Runtime ControlsSimilar attack · Straiker Blog
- MediumDocker Sandboxes vulnerability lets AI agents access sensitive files outside their sandbox (CVE-2026-103916) | Endor LabsSimilar attack · Endor Labs Blog
- MediumFree the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak BundlesSimilar attack · Check Point Research
- InfoRight Tool, Wrong Parameters: Defending LLM Agents Against Parameter PoisoningSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)