CVE-2025-49150

Cursor is a code editor built for programming with AI. Prior to 0.51.0, by default, the setting json.schemaDownload.enable was set to True. This means that by writing a JSON file, an attacker can trigger an arbitrary HTTP GET request that does not require user confirmation. Since the Cursor Agent can edit JSON files, this means a malicious agent, for example, after a prompt injection attack already succeeded, could trigger a GET request to an attacker controlled URL, potentially exfiltrating other data the agent may have access to. This vulnerability is fixed in 0.51.0.

• CWE-200

• https://github.com/getcursor/cursor/security/advisories/GHSA-9h3v-h59j-v6rj

Published

Jun 11, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-49145Combodo iTop is a web based IT service management tool. In v…6.5
• CVE-2025-49146pgjdbc is an open source postgresql JDBC Driver. From 42.7.4…5.9
• CVE-2025-49147Umbraco, a free and open source .NET content management syst…5.3
• CVE-2025-49148ClipShare is a lightweight and cross-platform tool for clipb…7.3
• CVE-2025-49149Dify is an open-source LLM app development platform. In vers…6.1
• CVE-2025-4915A vulnerability was found in PHPGurukul Auto Taxi Stand Mana…9.8
• CVE-2025-49151The affected products could allow an unauthenticated attacke…9.3
• CVE-2025-49152The affected products contain JSON Web Tokens (JWT) that do …8.7
• CVE-2025-49153The affected products could allow an unauthenticated attacke…9.3
• CVE-2025-49154An insecure access control vulnerability in Trend Micro Apex…7.8
• CVE-2025-49155An uncontrolled search path vulnerability in the Trend Micro…8.8
• CVE-2025-49156A link following vulnerability in the Trend Micro Apex One s…7.8