Compliance Impact

The provided information does not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.

Useful 0 Not Useful 0

Executive Summary

The vulnerability exists in Cursor, a code editor designed for programming with AI, prior to version 3.0. Cursor runs agent terminal commands in a sandbox that grants write access to the command's working directory. However, there is a flaw in how the agent can modify the working_directory parameter, allowing the sandbox to include writable paths outside the intended workspace.

A malicious agent could exploit this flaw by setting the working_directory to a sensitive location outside the workspace and write arbitrary files there with the user's privileges. This can lead to non-sandboxed Remote Code Execution, for example by overwriting the cursorsandbox helper so that later commands run without sandbox restrictions, all without requiring any user interaction beyond a benign prompt.

This vulnerability was fixed in Cursor version 3.0.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have severe impacts because it allows a malicious agent to execute arbitrary code outside the sandbox with the user's privileges without any user interaction beyond a benign prompt.

An attacker could overwrite important files or helpers like the cursorsandbox helper, enabling subsequent commands to run unsandboxed, potentially leading to full remote code execution on the affected system.

This could compromise the security and integrity of your system, leading to unauthorized access, data modification, or further exploitation.

Useful 0 Not Useful 0

Mitigation Strategies

The vulnerability is fixed in Cursor version 3.0. Immediate mitigation involves upgrading Cursor to version 3.0 or later to ensure the sandbox properly restricts writable paths and prevents unauthorized remote code execution.

Useful 0 Not Useful 0