# CVE-2025-64110: Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a malicious…

Source: https://junglewise.ai/threats/cve-2025-64110-cursor-is-a-code-editor-built-for-programming-with-ai-in-versions  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-05  
License: CC BY 4.0 with a link back

CVE-2025-64110 · Severity: high · CVSS 7.5 · Published 2025-11-05

Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a malicious agent to read sensitive files that should be protected via cursorignore. An attacker who has already achieved prompt injection, or a malicious model, could create a new cursorignore file which can invalidate the configuration of pre-existing ones. This could allow a malicious agent to read protected files. This issue is fixed in version 2.0.

Technologies: [Anysphere Cursor](https://junglewise.ai/threats/technologies/cursor). Vendors: [Anysphere](https://junglewise.ai/threats/vendors/anysphere).

## Quick answers

**Is CVE-2025-64110 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-64110 being exploited in the wild.

**How severe is CVE-2025-64110?** High severity, with a CVSS score of 7.5, published 5 November 2025.

**Which products and versions are affected?** Anysphere Cursor. The advisory does not name versions.

**Is there a fix for CVE-2025-64110?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-64110?** Check whether you run Anysphere Cursor. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Anysphere Cursor

## Related threats

- [Cursor for Windows binary planting in workspace root](https://junglewise.ai/threats/cve-2026-63093-cursor-for-windows-binary-planting-in-workspace-root)
- [Cursor AI editor sandbox escape via improper link resolution](https://junglewise.ai/threats/cve-2026-50549-cursor-ai-editor-sandbox-escape-via-improper-link-resolution)
- [Cursor AI Editor sandbox escape via agent-controlled working directory](https://junglewise.ai/threats/cve-2026-50548-cursor-ai-editor-sandbox-escape-via-agent-controlled-working)
- [Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a…](https://junglewise.ai/threats/cve-2025-64108-cursor-is-a-code-editor-built-for-programming-with-ai-in-versions)
- [Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings…](https://junglewise.ai/threats/cve-2025-64107-cursor-is-a-code-editor-built-for-programming-with-ai-in-versions)