Cursor AI Code Editor Fixed Flaw Allowing Attackers to Run Commands via Prompt Injection

Source: The Hacker News | Added:

A high-severity security flaw in the Cursor AI code editor has been disclosed, allowing potential remote code execution through prompt injection. The vulnerability, tracked as CVE-2025-54135, has been patched in version 1.3 released on July 29, 2025.

---

Impact: Cursor AI code editor

In the Wild: Unknown

Age: Newly disclosed

Remediation: Patched in version 1.3 released on July 29, 2025

Read Full Original Article →