CVE-2025-61589

{
  "id": "CVE-2025-61589",
  "sourceIdentifier": "[email protected]",
  "published": "2025-10-03T07:15:45.470",
  "lastModified": "2026-10-19T17:10:00.173",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cursor is a code editor built for programming with AI. In versions 1.6 and below, Mermaid (a to render diagrams) allows embedding images which then get rendered by Cursor in the chat box. An attacker can use this to exfiltrate sensitive information to a third-party attacker controlled server through an image fetch after successfully performing a prompt injection. A malicious model (or hallucination/backdoor) might also trigger this exploit at will. This issue requires prompt injection from malicious data (web, image upload, source code) in order to exploit. In that case, it can send sensitive information to an attacker-controlled external server. Some additional bypasses not covered in the initial fix to this issue were discovered, see GHSA-43wj-mwcc-x93p. This issue is fixed in version 1.7."
    },
    {
      "lang": "es",
      "value": "Cursor es un editor de código diseñado para programar con IA. En las versiones 1.6 e inferiores, Mermaid (una para renderizar diagramas) permite incrustar imágenes que luego son renderizadas por Cursor en el cuadro de chat. Un atacante puede usar esto para exfiltrar información sensible a un servidor controlado por un atacante de terceros a través de una obtención de imagen después de realizar con éxito una inyección de prompt. Un modelo malicioso (o una alucinación/puerta trasera) también podría activar este exploit a voluntad. Este problema requiere inyección de prompt a partir de datos maliciosos (web, carga de imagen, código fuente) para poder explotarlo. En ese caso, puede enviar información sensible a un servidor externo controlado por un atacante. Se descubrieron algunas derivaciones adicionales no cubiertas en la solución inicial a este problema, ver GHSA-43wj-mwcc-x93p. Este problema está solucionado en la versión 1.7."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "cursor",
          "product": "cursor",
          "versions": [
            {
              "version": "< 1.7",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 5.9,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-10-03T13:23:05.001776Z",
          "id": "CVE-2025-61589",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:anysphere:cursor:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "1.7",
              "matchCriteriaId": "F1643496-D7AD-4729-A51E-B3E16C0A2E5C"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/cursor/cursor/security/advisories/GHSA-43wj-mwcc-x93p",
      "source": "[email protected]",
      "tags": [
        "Not Applicable"
      ]
    },
    {
      "url": "https://github.com/cursor/cursor/security/advisories/GHSA-xw2x-252g-97w2",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}