{
  "schema_version": "1.6.0",
  "id": "ACVE-2025-0009",
  "aliases": [
    "CVE-2025-54135"
  ],
  "published": "2026-09-19T00:00:00Z",
  "modified": "2026-09-19T00:00:00Z",
  "summary": "Cursor CurXecute can inject an MCP configuration",
  "details": "## What the vulnerability is\n\nCursor's CurXecute issue concerns an MCP configuration path that can be influenced through repository or other untrusted content. The advisory summary describes injection of an MCP configuration, which can cause the agent to reach a server definition the user did not intend to approve. This record treats Cursor before `1.3.0` as affected.\n\n## Which configuration is exposed\n\nThe matcher exposes Cursor when `harness.id` is `cursor`, `harness.version` is below `1.3.0`, and at least one `mcpServers` entry has a `transport` field. The transport-present condition is deliberately broad: it identifies an MCP-capable Cursor configuration, not a particular `.cursor/mcp.json` file or server. It does not require project scope, a package identity, a URL host, or a specific transport value.\n\n## How ACVE detects it\n\nACVE reads `harness.id`, `harness.version`, and the existence of `mcpServers[].transport`. It cannot reproduce the CurXecute input, inspect the source of the configuration, or determine whether a transport was injected rather than intentionally configured. The finding is therefore a static exposure signal.\n\n## Fix\n\n1. Upgrade Cursor to `1.3.0` or later after confirming the release boundary.\n2. Review MCP configuration sources and accept only server commands, arguments, and URLs that are intentionally managed.\n\nA clean result from this matcher means only that no configured transport was recorded; it does not establish that Cursor cannot receive untrusted project content through another path.\n\n## Grounding needed\n\n`acve advisory ground` must confirm the affected Cursor range and fixed release for `CVE-2025-54135`.\n\nThe matcher cannot establish that a transport was injected rather than intentionally configured.\n\n## References\n\nSee `references` for primary sources.",
  "affected": [
    {
      "package": {
        "ecosystem": "AgentHarness",
        "name": "cursor"
      },
      "ranges": [
        {
          "type": "SEMVER",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.3.0"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-54135"
    },
    {
      "type": "REPORT",
      "url": "https://example.com/research/acve"
    },
    {
      "type": "FIX",
      "url": "https://github.com/pickbitsai/acve/issues?q=CVE-2025-54135"
    }
  ],
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "8"
    }
  ],
  "database_specific": {
    "severity": "HIGH",
    "acve": {
      "specVersion": 1,
      "status": "candidate",
      "vulnClasses": [
        "config-file-injection"
      ],
      "cwe": [
        "CWE-15"
      ],
      "taxonomy": {
        "owasp_asi": [
          "ASI05 Improper Output Handling"
        ],
        "atlas": [
          "AML.T0051"
        ]
      },
      "matcher": {
        "all": [
          {
            "field": "harness.id",
            "op": "eq",
            "value": "cursor"
          },
          {
            "field": "harness.version",
            "op": "semverRange",
            "value": "<1.3.0"
          },
          {
            "some": "mcpServers",
            "where": {
              "field": "transport",
              "op": "exists"
            }
          }
        ]
      },
      "fix": {
        "summary": "Upgrade Cursor to the confirmed fixed release and review MCP configuration sources.",
        "actions": [
          {
            "type": "upgrade",
            "target": "harness:cursor",
            "to": "1.3.0",
            "why": "Use the fixed release."
          }
        ]
      },
      "exposure": "local",
      "exploitation": {
        "vector": "malicious project or server configuration",
        "userInteraction": "required",
        "kev": false
      },
      "grounding": {
        "osv": {
          "checkedAt": "2026-09-20T02:43:25Z",
          "found": false,
          "aliasesConfirmed": [],
          "packagesConfirmed": [],
          "fixedVersionsConfirmed": [],
          "cvss": []
        },
        "nvd": {
          "checkedAt": "2026-09-20T02:43:25Z",
          "found": false,
          "cvss": null,
          "published": null
        },
        "kev": {
          "checkedAt": "2026-09-20T02:43:25Z",
          "listed": false
        },
        "registry": {
          "checkedAt": "2026-09-20T02:43:25Z",
          "confirmed": [],
          "missing": []
        }
      }
    }
  }
}