CVE-2024-48919

Cursor is a code editor built for programming with AI. Prior to Sep 27, 2024, if a user generated a terminal command via Cursor's Terminal Cmd-K/Ctrl-K feature and if the user explicitly imported a malicious web page into the Terminal Cmd-K prompt, an attacker with control over the referenced web page could have a significant chance of influencing a language model to output arbitrary commands for execution in the user's terminal. This scenario would require the user explicitly opt-in to including the contents of a compromised webpage, and it would require that the attacker display prompt injection text in the the contents of the compromised webpage. A server-side patch to not stream back newlines or control characters was released on September 27, 2024, within two hours of the issue being reported. Additionally, Cursor 0.42 includes client-side mitigations to prevent any newline or control character from being streamed into the terminal directly. It also contains a new setting, `"cursor.terminal.usePreviewBox"`, which, if set to true, streams the response into a preview box whose contents then have to be manually accepted before being inserted into the terminal. This setting is useful if you're working in a shell environment where commands can be executed without pressing enter or any control character. The patch has been applied server-side, so no additional action is needed, even on older versions of Cursor. Separately, Cursor's maintainers also recommend, as best practice, to only include trusted pieces of context in prompts.

• CWE-20

• https://github.com/getcursor/cursor/security/advisories/GHSA-rmj9-23rg-gr67

Published

Oct 22, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-48913Hono, a web framework, prior to version 4.6.5 is vulnerable …5.9
• CVE-2024-48914Vendure is an open-source headless commerce platform. Prior …9.1
• CVE-2024-48915Agent Dart is an agent library built for Internet Computer f…8.7
• CVE-2024-48916Ceph is a distributed object, block, and file storage platfo…8.1
• CVE-2024-48917PhpSpreadsheet is a PHP library for reading and writing spre…7.5
• CVE-2024-48918RDS Light is a simplified version of the Reflective Dialogue…8.1
• CVE-2024-4892The BuddyPress plugin for WordPress is vulnerable to Stored …5.4
• CVE-2024-48920PutongOJ is online judging software. Prior to version 2.1.0-…9.1
• CVE-2024-48921Kyverno is a policy engine designed for Kubernetes. A kyvern…2.7
• CVE-2024-48924### Impact When this library is used to deserialize message…8.7
• CVE-2024-48925Umbraco, a free and open source .NET content management syst…6.5
• CVE-2024-48926Umbraco, a free and open source .NET content management syst…3.1