Cursor Workspace File Injection
Date: 2025-10
Affected: Cursor Workspace File Injection
Attack vector: rce
Category: real-world
Severity: High
CVE: CVE-2025-61590
CWE: CWE-94
CVSS:  (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

Cursor agent prompt led Cursor to write malicious `.code-workspace` settings, allowing command execution on workspace open via VSCode integration.


Mitigations:

Architectural layers (MAESTRO):