AI developer toolsBriefPublic record
Cursor “CurXecute” (CVE-2025-54135) and “MCPoison” (CVE-2025-54136)
CurXecute: prompt injection could write `.cursor/mcp.json` and get RCE.
- Disclosed
What happened
- MCPoison: an approved MCP configuration could be silently swapped.
- Fixed: Cursor 1.3.
Live scores
Live scores
CVE-2025-54135- EPSS
- 0.021
some chance of attack soon - VEDAS
- 0.515
some exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Live scores
CVE-2025-54136- EPSS
- 0.285
likely to be attacked soon - VEDAS
- 0.187
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Sources
- https://www.aim.security/lp/aim-labs-curxecute-blogpost
- https://research.checkpoint.com/2025/cursor-vulnerability-mcpoison/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.