High · published November 5, 2025
⚡ A sneaky logic bug in Cursor allows crafty attackers to read sensitive files that should be off-limits! 🔓 Think of Cursor as a restaurant with a special menu for VIPs. If a mischievous chef (malicious agent) can create a fake menu, they could serve themselves dishes meant for the elite diners (protected files), ruining the whole experience! With this vulnerability, an attacker who has already implanted a prompt injection could potentially expose all sorts of sensitive information. It’s like leaving the back door open while inviting everyone to check out your finest recipes — absolutely devastating!
Think of Cursor as a restaurant with a special menu for VIPs. If a mischievous chef (malicious agent) can create a fake menu, they could serve themselves dishes meant for the elite diners (protected files), ruining the whole experience! This logic flaw in versions 1.7.23 and below allows an attacker with prompt injection access to create a new cursorignore file, overriding previous configurations that should protect sensitive files.
With this vulnerability, an attacker who has already implanted a prompt injection could potentially expose all sorts of sensitive information. It’s like leaving the back door open while inviting everyone to check out your finest recipes — absolutely devastating! Update Cursor to version 2.0 immediately to close this loophole. Review your security settings to ensure all sensitive files have effective cursorignore configurations. Don't forget to monitor for any signs of prompt injections that may already be in place! You've got this! With a quick update, you can secure your setup and keep those sensitive files safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| anysphere/cursor | < 2.0 | 2.0 |