What is the CVSS score of CVE-2025-61590?

CVE-2025-61590 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Cursor are affected by CVE-2025-61590?

Cursor code editor versions 1.6 and below contain a remote code execution vulnerability through Visual Studio Code Workspace files that allows attackers to bypass existing security controls and…. A patch is available.

How to fix or mitigate CVE-2025-61590?

Within 24 hours: Identify all Cursor installations across development teams and confirm current versions via Help > About in the application. Within 7 days: Deploy Cursor version 1.7 or later across all affected systems through your software deployment mechanism or direct user update. Within 30 days: Conduct a security audit of any MCP server integrations used with Cursor to identify and remediate potentially compromised connections; review chat history logs if available for signs of exploitation attempts.

Cursor CVE-2025-61590

EUVD-2025-33206 HIGH

Code Injection (CWE-94)

2025-10-03 security-advisories@github.com

RCE Code Injection Cursor

7.5

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.5 HIGH

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:25 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

1.7

EUVD ID Assigned

Mar 13, 2026 - 19:29 euvd

EUVD-2025-33206

Analysis Generated

Mar 13, 2026 - 19:29 vuln.today

CVE Published

Oct 03, 2025 - 17:15 nvd

HIGH 7.5

DescriptionGitHub Advisory

Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution (RCE) attacks through Visual Studio Code Workspaces. Workspaces allow users to open more than a single folder and save specific settings (pretty similar to .vscode/settings.json) for the folders / project. An untitled workspace is automatically created by VS Code (untitled.code-workspace), which contains all the folders and workspace settings from the user's current session, opening up an entire new attack vector if the user has a .code-workspace file in path (either untitled created automatically or a saved one). If an attacker is able to hijack the chat context of the victim (such as via a compromised MCP server), they can use prompt injection to make the Cursor Agent write into this file and modify the workspace. This leads to a bypass of CVE-2025-54130 which can lead to RCE by writing to the settings section. This issue is fixed in version 1.7.

Analysis

Technical ContextAI

Remote code execution allows an attacker to run arbitrary commands or code on the target system over a network without prior authentication. This vulnerability is classified as Code Injection (CWE-94).

RemediationAI

Apply vendor patches immediately. Restrict network access to vulnerable services. Implement network segmentation and monitoring for anomalous activity.