High · published November 5, 2025
⚡ A crafty prompt injection attack can sneak past file protections in Cursor versions 1.7.44 and below, opening the door to some serious mischief! 🔥 Think of it like a restaurant where the chef trusts the waiter to take orders without a double-check. If that waiter goes rogue and delivers a forged order, they could whip up a dish that’s not safe to serve — in this case, modifying protected files without anyone noticing! An attacker could exploit this vulnerability to overwrite crucial files required by Cursor, potentially paving the way for remote code execution (RCE). This is absolutely devastating, as it could compromise system integrity and lead to unauthorized access or control over systems supporting NTFS. One wrong move could unlock a treasure chest of chaos!
Think of it like a restaurant where the chef trusts the waiter to take orders without a double-check. If that waiter goes rogue and delivers a forged order, they could whip up a dish that’s not safe to serve — in this case, modifying protected files without anyone noticing! This vulnerability arises from various NTFS path quirks allowing an attacker to bypass file protections and overwrite files that usually need human approval. When chained with a prompt injection or malicious model, it can lead to significant security breaches.
An attacker could exploit this vulnerability to overwrite crucial files required by Cursor, potentially paving the way for remote code execution (RCE). This is absolutely devastating, as it could compromise system integrity and lead to unauthorized access or control over systems supporting NTFS. One wrong move could unlock a treasure chest of chaos! To protect your systems, immediately upgrade Cursor to version 2.0. Additionally, implement strict file approval processes and regularly audit your code for potential prompt injection risks. Don't wait — secure your environment now! You've got this! Follow these steps and you'll be a security hero in no time. 🦸
| Product | Versions | Fixed in |
|---|---|---|
| anysphere/cursor | < 2.0 | 2.0 |