Alerts
Events
DCR
Explore Cyware Products
Alerts
Events
DCR
Go to listing page
AI-powered Cursor IDE vulnerable to prompt-injection attacks
Malware and Vulnerabilities
August 01, 2025
bleepingcomputer
A critical prompt-injection vulnerability, identified as CVE-2025-54135 and dubbed "CurXecute", affects almost all versions of the AI-powered Cursor IDE prior to version 1.3. This flaw allows remote code execution with developer privileges.
Read More
Cursor IDE
Prompt Injection
Publisher
Previous
Florida prison exposes visitor contact info to every in ...
Breaches and Incidents
Next
Pi-hole discloses data breach triggered by WordPress pl ...
Breaches and Incidents
/https://cyware-ent.s3.amazonaws.com/public_image/theregister61cc7699-6594-4b74-a94b-7f57923ec152.jpg)
/https://cyware-ent.s3.amazonaws.com/public_image/bleepingcomputerca8433fa-bb41-4c4b-8fd2-76303ca21c0d.jpg)
