Last seen August 5, 2025

CVE-2025-54136 Remote Code Execution Vulnerability affecting AI

Evidence indicates that the affected technology is affected by remote code execution.

Technical Severity

Medium severity

Lifecycle Status

STABLE

Sources

1 source: thehackernews.com

What Happened

Evidence indicates that the affected technology is affected by remote code execution.

Why This Matters

The evidence matters to defenders using Cursor AI Code because it could let an attacker run code in affected environments.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether Cursor AI Code is present in your environment and review the affected configuration.

Follow this incident as it develops Material-change notifications are being prepared for BugSkan Pro.

Exposure

Recommended Response

First Seen

Aug 05, 2025 05:30

Last Seen

Aug 05, 2025 05:30

Exploitation status: UNKNOWN

Primary entities:

MCP Remote Code Execution CVE-2025-54136

Authoritative Intelligence

CVE CVE-2025-54136 Incident identifier

NVD CVSS 7.2 HIGH NVD

FIRST EPSS 0.261 97.8 pct

CWE CWE-78 Weakness classification

Provider evidence: NVD, FIRST EPSS

EPSS is a vulnerability exploitation probability signal, not proof that your environment is exposed. CISA KEV means known exploitation of the vulnerability, not that your system was exploited.

Timeline

Incident first seen
Aug 05, 2025 05:30
BugSkan first recorded this incident.
Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval - The Hacker News
Aug 05, 2025 05:30
thehackernews.com · Vulnerability

Sources

Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval - The Hacker News

thehackernews.com · Aug 05, 2025 05:30

CVE-2025-54136, codenamed MCPoison, is a high-severity vulnerability in the Cursor AI code editor that allows for remote code execution (RCE). It exploits how the editor handles Model Context Protocol (MCP) configurations, permitting an attacker to silently swap a previously approved, benign configuration with a malicious payload without re-prompting the user.

Open publisher source

Watchlist Match

Want personalized relevance?

Create an account to see which incidents overlap with the technologies you monitor.