# CVE-2025-64106: Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in…

Source: https://junglewise.ai/threats/cve-2025-64106-cursor-is-a-code-editor-built-for-programming-with-ai-in-versions  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-04  
License: CC BY 4.0 with a link back

CVE-2025-64106 · Severity: high · CVSS 8.8 · Published 2025-11-04

Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor's MCP server installation enables specially crafted deep-links to bypass the standard security warnings and conceal executed commands from users if they choose to accept the server. If an attacker is able to convince a victim to navigate to a malicious deeplink, the victim will not see the correct speedbump modal, and if they choose to accept, will execute commands specified by the attackers deeplink.

Technologies: [Anysphere Cursor](https://junglewise.ai/threats/technologies/cursor). Vendors: [Anysphere](https://junglewise.ai/threats/vendors/anysphere).

## Quick answers

**Is CVE-2025-64106 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-64106 being exploited in the wild.

**How severe is CVE-2025-64106?** High severity, with a CVSS score of 8.8, published 4 November 2025.

**Which products and versions are affected?** Anysphere Cursor. The advisory does not name versions.

**Is there a fix for CVE-2025-64106?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-64106?** Check whether you run Anysphere Cursor. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Anysphere Cursor

## Related threats

- [Cursor for Windows binary planting in workspace root](https://junglewise.ai/threats/cve-2026-63093-cursor-for-windows-binary-planting-in-workspace-root)
- [Cursor AI editor sandbox escape via improper link resolution](https://junglewise.ai/threats/cve-2026-50549-cursor-ai-editor-sandbox-escape-via-improper-link-resolution)
- [Cursor AI Editor sandbox escape via agent-controlled working directory](https://junglewise.ai/threats/cve-2026-50548-cursor-ai-editor-sandbox-escape-via-agent-controlled-working)
- [Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a malicious…](https://junglewise.ai/threats/cve-2025-64110-cursor-is-a-code-editor-built-for-programming-with-ai-in-versions)
- [Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a…](https://junglewise.ai/threats/cve-2025-64108-cursor-is-a-code-editor-built-for-programming-with-ai-in-versions)