A critical vulnerability in Cursor IDE allows authenticated attackers to achieve remote code execution through prompt injection on systems with case-insensitive file systems.

The application improperly handles case sensitivity when protecting sensitive configuration files, such as mcp.json. An attacker with low-level privileges can leverage prompt injection to modify these files and execute arbitrary code on the underlying system.

The ability to achieve remote code execution poses a severe threat to organizational security, as it grants attackers full control over the affected developer workstation. This could lead to the theft of proprietary source code, access to internal credentials, or the injection of malicious code into development pipelines. Given the CVSS score of 8.0, this is classified as a high-severity risk that requires immediate attention to prevent lateral movement within the development environment.

Immediate Action: Update the Cursor IDE to version 1.7 or later, which contains the fix for this case-sensitivity flaw.

Proactive Monitoring: Review audit logs for unusual file modification patterns within the .cursor directory and monitor for suspicious AI prompt inputs that deviate from standard development workflows.

Compensating Controls: Ensure that developer machines are configured with strict file system permissions and consider using endpoint detection and response tools to monitor for unauthorized execution of child processes initiated by the IDE.

Public Exploit Available: Unknown.

This vulnerability represents a significant risk to development environments due to the potential for full remote code execution. Security teams should prioritize updating all instances of Cursor IDE to version 1.7 or higher across the organization. Failure to patch may allow attackers to gain persistent access to sensitive development infrastructure and proprietary intellectual property.