HighVulnerabilityLLM-specific
CVE-2025-59944: Cursor IDE case-sensitive file protection bypass allowing code execution
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-59944
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.4%
Summary
CVE-2025-59944 affects Cursor, an AI-assisted code editor, in versions 1.6.23 and below. Its protection for sensitive files such as */.cursor/mcp.json uses case-sensitive checks, so on case-insensitive filesystems an attacker can use prompt injection to modify those files and achieve remote code execution. The source classifies the weakness as CWE-178, Improper Handling of Case Sensitivity.
Mitigation
This issue is fixed in version 1.7.
Related items
- LowSocial Engineering AI Agents: The New BEC for 2026Similar attack · Dark Reading
- MediumGHSA-hmq2-7hp6-7crh: Banks: User-controlled prompt input can be parsed as privileged chat messagesSimilar attack · GitHub Advisory Database
- CriticalGHSA-9mp3-24cc-77mg: PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool CallsSimilar attack · GitHub Advisory Database
- Medium'AgentCorruption' Puts AWS Environments At Risk With Single PromptSimilar attack · Dark Reading
- MediumGHSA-4xxv-6wmf-xf45: PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspaceSimilar attack · GitHub Advisory Database