Skip to content

CVE-2025-54132

Named by 2 kept items in this workspace.

Search every workspace for CVE-2025-54132. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • AI Agent Hacking Writeups
    repo2026-09-17It is written here as CVE-2025-54132 (Cursor IDE, arbitrary data exfiltration via Mermaid).

    Cursor IDE, arbitrary data exfiltration via Mermaid

  • Advanced Prompt Injection Techniques 2026: 7 Attack Chains
    article2026-07-04

    Mermaid diagram exfiltration: malicious instruction embedded in a Markdown file causes Cursor to generate a Mermaid diagram with an external image reference; the renderer fetches the image from an attacker-controlled URL, encoding stolen data in request parameters.

All cves in this workspace.