Cyber Resilience

CVE-2025-62354

CriticalRCE

Published: 26 November 2025

Published
26 November 2025
Modified
15 April 2026
KEV Added
—
Patch
—
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0019 40.0th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-62354 is a critical-severity OS Command Injection (CWE-78) vulnerability in Hiddenlayer (inferred from references). Its CVSS base score is 9.8 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 40.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).

Deeper analysis

CVE-2025-62354 is a critical command injection vulnerability (CWE-78) in Cursor, stemming from improper neutralization of special elements used in an OS command. This flaw allows an unauthorized attacker to execute commands outside of those specified in the allowlist, resulting in arbitrary code execution. The vulnerability carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and was published on 2025-11-26.

Any unauthorized attacker can exploit this vulnerability remotely over the network with low complexity, requiring no privileges or user interaction. Successful exploitation enables full arbitrary code execution on the affected system, potentially compromising confidentiality, integrity, and availability.

Mitigation details are available in the advisory published by HiddenLayer at https://hiddenlayer.com/sai_security_advisor/2025-11-cursor/.

EU & UK References

Vulnerability details

Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arbitrary code execution.

CWE(s)
CWE-78

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
Why these techniques?

Command injection vulnerability enabling remote unauthenticated arbitrary OS command execution (AV:N/AC:L/PR:N), directly mapping to exploitation of a public-facing application.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2026-4631Shared CWE-78
CVE-2026-42062Shared CWE-78
CVE-2025-41709Shared CWE-78
CVE-2025-56819Shared CWE-78
CVE-2026-34176Shared CWE-78
CVE-2020-37125Shared CWE-78
CVE-2026-34387Shared CWE-78
CVE-2026-32968Shared CWE-78
CVE-2025-60803Shared CWE-78
CVE-2026-25111Shared CWE-78

Affected Assets

Hiddenlayer
—
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SI-10 Information Input Validation good match
prevent

Requires validation and sanitization of information inputs to OS commands, directly preventing improper neutralization of special elements that enable command injection.

SI-2 Flaw Remediation good match
prevent

Mandates timely identification, reporting, and correction of flaws like this command injection vulnerability through patching and updates.

CM-7 Least Functionality partial match
prevent

Restricts system functionality to only essential capabilities, limiting the impact of arbitrary command execution by prohibiting unnecessary OS commands outside the intended allowlist.

References