CVEvulnerability

CVE-2025-62354

9.8 CRITICAL Published 2025-11-26 Modified 2026-10-18 Official page ↗
Status
Deferred
Published
2025-11-26
Last modified
2026-10-18
Assigner
6f8de1f0-f67e-45a6-b68f-98777fdb759c
CVSS 3.1 (6f8de1f0-f67e-45a6-b68f-98777fdb759c)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78

Description

Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arbitrary code execution.

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References