{"metadata": {"vulnerability": "cve-2025-54136", "count": 38, "kinds": {"milestone": 3, "sighting": 29, "kev": 0, "other": 6}}, "data": [{"timestamp": "2025-07-16T23:53:40.510Z", "date_only": false, "value": "2025-07-16T23:53:40.510Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-54136", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-08-01T23:08:21.817Z", "date_only": false, "value": "2025-08-01T23:08:21.817Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-54136", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-08-01T23:08:21.817Z", "date_only": false, "value": "2025-08-01T23:08:21.817Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2025-54136", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-02T00:15:25.290Z", "date_only": false, "value": "2025-08-02T00:15:25.290", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-54136", "record": "FKIE_CVE-2025-54136", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-08-04T17:16:34.453Z", "date_only": false, "value": "2025-08-04T17:16:34.453679Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-54136", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-08-04T17:16:34.453Z", "date_only": false, "value": "2025-08-04T17:16:34.453679Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-54136", "record": "FKIE_CVE-2025-54136", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-08-04T17:16:42.841Z", "date_only": false, "value": "2025-08-04T17:16:42.841Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-54136", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-08-04T17:16:42.841Z", "date_only": false, "value": "2025-08-04T17:16:42.841Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-54136", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-05T11:01:00Z", "date_only": false, "value": "2025-08-05T11:01:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/08/cursor-ai-code-editor-vulnerability.html", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "960177f6-3c78-4b31-b060-f0dd1db52a9f", "url": "https://thehackernews.com/2025/08/cursor-ai-code-editor-vulnerability.html"}, {"timestamp": "2025-08-05T13:03:45Z", "date_only": false, "value": "2025-08-05T13:03:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/7284", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "625e78e2-3c05-49a9-aa11-b6fc09719944", "content": "\ud83d\udea8 A high-severity flaw in Cursor AI (CVE-2025-54136) let attackers hijack trusted MCP configs\u2014triggering remote code execution every time you opened the project.\n\nNo re-prompt. No warning. Just silent compromise by modifying a config file you already trusted.\n\nLearn more \u2192 https://thehackernews.com/2025/08/cursor-ai-code-editor-vulnerability.html", "url": "https://t.me/thehackernews/7284", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-05T13:03:46.930Z", "date_only": false, "value": "2025-08-05T13:03:46.930932Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lvnrhfhdms26", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "e29c20cc-0c4c-4aa6-8fd6-7fe5d43ba4ff", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lvnrhfhdms26"}, {"timestamp": "2025-08-05T13:05:09Z", "date_only": false, "value": "2025-08-05T13:05:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/235987", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "41cfb9c8-73c9-443b-bd69-ea73d618e8b7", "content": "CVE-2025-54136 \u2013\u00a0 MCPoison Cursor IDE: Persistent Code Execution via MCP Trust Bypass\nhttps://ift.tt/XfQd1mH", "url": "https://t.me/ctinow/235987"}, {"timestamp": "2025-08-05T14:32:37.482Z", "date_only": false, "value": "2025-08-05T14:32:37.482708Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3lvnw7fadh6k2", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "7d6e8681-4c5f-43eb-beff-5154cb93aa79", "url": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3lvnw7fadh6k2"}, {"timestamp": "2025-08-05T14:46:35.149Z", "date_only": false, "value": "2025-08-05T14:46:35.149976Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3lvnx2jh6sp22", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "add09c89-5d72-48ad-9501-4d92f7629389", "url": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3lvnx2jh6sp22"}, {"timestamp": "2025-08-05T16:02:07.969Z", "date_only": false, "value": "2025-08-05T16:02:07.969293Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lvo3gd7mcp2i", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "44b35679-b748-4668-b1f1-43877e154f68", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lvo3gd7mcp2i"}, {"timestamp": "2025-08-05T16:37:43.394Z", "date_only": false, "value": "2025-08-05T16:37:43.394412Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lvo5fvan4k2h", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "b4754608-b249-40a6-8817-26c838e34d49", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3lvo5fvan4k2h"}, {"timestamp": "2025-08-05T16:50:01Z", "date_only": false, "value": "2025-08-05T16:50:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/xqO0_PWLKtVwwojJCjCsYYBEBGCE-dt2EY-S6CjM_MXq4w", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "4ed092db-95a6-4a64-8bc1-eeda0622d4b6", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-05T19:10:10Z", "date_only": false, "value": "2025-08-05T19:10:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/15169", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "0ed7da81-5532-46b0-833f-41a60bda42cf", "content": "\ud83d\udc69\u200d\ud83d\udcbb \ud83d\udcf1 CVE-2025-54136 \u2013  MCPoison Cursor IDE: Persistent Code Execution via MCP Trust Bypass.\n\nhttps://research.checkpoint.com/2025/cursor-vulnerability-mcpoison/", "url": "https://t.me/cKure/15169", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-05T23:31:26.500Z", "date_only": false, "value": "2025-08-05T23:31:26.500041Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lvoujqir6o2a", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "5f3ab69f-9938-4828-89d2-ec315f43207d", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lvoujqir6o2a"}, {"timestamp": "2025-08-06T07:08:34.840Z", "date_only": false, "value": "2025-08-06T07:08:34.840387Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lvpo364rrw2r", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "11a6ff4b-0440-4de8-ae8c-e7d85e1e7cc8", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lvpo364rrw2r"}, {"timestamp": "2025-08-06T09:30:20Z", "date_only": false, "value": "2025-08-06T09:30:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/567", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "c4cd2de0-2431-4c1a-a580-856c29bc496c", "content": "Top Security News for Today\n\nSurveilling Your Children with AirTags  \nhttps://www.schneier.com/blog/archives/2025/08/surveilling_your_children_with_airtags.html\n\nHTTP Request Smuggling Explained: with seasoned bug bounty hunter NahamSec and world-class researcher James Kettle  \nhttps://portswigger.net/blog/http-request-smuggling-explained-with-seasoned-bug-bounty-hunter-nahamsec-and-world-class-researcher-james-kettle\n\n3 Custom VT-x Hypervisors in C \u2013 EPT Cloaking, CPUID/MSR Spoofing & VMX Control  \nhttps://www.reddit.com/r/lowlevel/comments/1mi5txt/3_custom_vtx_hypervisors_in_c_ept_cloaking/\n\nDutch Caribbean islands respond to cyberattacks on courts, tax departments  \nhttps://therecord.media/aruba-curacao-governments-cyberattacks\n\nCVE-2025-54136 \u2013 MCPoison Cursor IDE: Persistent Code Execution via MCP Trust Bypass  \nhttps://research.checkpoint.com/2025/cursor-vulnerability-mcpoison/\n\nTaiwan\u2019s TSMC fires engineers over suspected theft of semiconductor secrets  \nhttps://therecord.media/tsmc-fires-engineers-over-semiconductor-secrets-theft\n\nVietnamese-speaking hackers appear to be running global data theft operation through Telegram  \nhttps://therecord.media/pxa-infostealer-telegram-bots-vietnamese-speaking-hackers\n\nOdooMap - A Pentesting Tool for Odoo Applications  \nhttps://www.reddit.com/r/netsec/comments/1micsmu/odoomap_a_pentesting_tool_for_odoo_applications/\n\nElevate your protection with expanded Microsoft Defender Experts coverage  \nhttps://techcommunity.microsoft.com/blog/microsoftsecurityexperts/elevate-your-protection-with-expanded-microsoft-defender-experts-coverage/4439134\n\nBipartisan Senate duo wants answers from UnitedHealth over Episource data breach  \nhttps://therecord.media/episource-data-breach-questions-senators-cassidy-hassan\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/567", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-06T10:00:44Z", "date_only": false, "value": "2025-08-06T10:00:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/08/06/cve-mcpoison-cursor-ide-persistent.html", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "d6b00545-a4fc-47aa-9fa1-371107a5d7a8", "url": "https://threatintel.cc/2025/08/06/cve-mcpoison-cursor-ide-persistent.html"}, {"timestamp": "2025-08-06T12:00:51.643Z", "date_only": false, "value": "2025-08-06T12:00:51.643198Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/114981709495083968", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "53263f82-f608-44b2-a020-e1a3948f1cc4", "url": "https://infosec.exchange/users/edwardk/statuses/114981709495083968"}, {"timestamp": "2025-08-08T07:08:01.618Z", "date_only": false, "value": "2025-08-08T07:08:01.618599Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lvuoy232du25", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "a68e5f6c-6f4e-4200-819a-24478427142c", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lvuoy232du25"}, {"timestamp": "2026-03-04T14:45:35.078Z", "date_only": false, "value": "2026-03-04T14:45:35.078465Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mgajjp2g4n22", "record": "cve-2025-54136", "field": "creation_timestamp", "uuid": "371ddfc4-9a8a-4540-b127-4a5323958869", "url": "https://bsky.app/profile/flarestart.bsky.social/post/3mgajjp2g4n22"}, {"timestamp": "2026-04-28T17:35:17.635Z", "date_only": false, "value": "2026-04-28T17:35:17.635113Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hasamba72.bsky.social/post/3mkl4nscgnc2l", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "6e707827-5a73-41e1-92bf-8fc7563abb6a", "url": "https://bsky.app/profile/hasamba72.bsky.social/post/3mkl4nscgnc2l"}, {"timestamp": "2026-06-17T09:39:30.987Z", "date_only": false, "value": "2026-06-17T09:39:30.987", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-54136", "record": "FKIE_CVE-2025-54136", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-16T19:00:16.869Z", "date_only": false, "value": "2026-07-16T19:00:16.869670Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_qFyWwPBG5YYrYVJCuvS8pNkDyhJdlaykHNtl_KVjYImn64", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "900b34c0-bae3-4345-b0f1-a57b6b3b9d8a"}, {"timestamp": "2026-07-17T00:00:32.280Z", "date_only": false, "value": "2026-07-17T00:00:32.280412Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_qFyWwPBG5YYrYVJCuvS8pNkDyhJdlaykHNtl_KVjYImn64", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "370f4b2b-96c6-476b-9d57-1c7434434d22"}, {"timestamp": "2026-07-18T00:00:33.715Z", "date_only": false, "value": "2026-07-18T00:00:33.715594Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_qFyWwPBG5YYrYVJCuvS8pNkDyhJdlaykHNtl_KVjYImn64", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "1a249387-83ff-4c5e-9e13-20978b9fc478", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-21T13:00:07.290Z", "date_only": false, "value": "2026-07-21T13:00:07.290711Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ckuRED/626", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "bb1b52c1-5743-47d5-adec-8ff7856de50a", "url": "https://t.me/ckuRED/626", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-22T00:00:24.132Z", "date_only": false, "value": "2026-07-22T00:00:24.132156Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ckuRED/626", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "c2ed9644-fbe1-4429-8388-fc318ad8b2ab", "url": "https://t.me/ckuRED/626", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-23T21:05:56.661Z", "date_only": false, "value": "2026-08-23T21:05:56.661865Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/elang2/7aeddf9eecc4e5e9f880d2ed041b6168", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "b716fca6-ac8c-481e-97fe-3fc3389b5c83", "url": "https://gist.github.com/elang2/7aeddf9eecc4e5e9f880d2ed041b6168"}, {"timestamp": "2026-08-26T08:54:54.055Z", "date_only": false, "value": "2026-08-26T08:54:54.055357Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/AfvanJaffer/8b427775455df5679cc487a0f92dc1b9", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "5a51410a-58fe-416f-8d9e-051e947728b0", "url": "https://gist.github.com/AfvanJaffer/8b427775455df5679cc487a0f92dc1b9"}, {"timestamp": "2026-08-27T15:00:06.397Z", "date_only": false, "value": "2026-08-27T15:00:06.397354Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cve0day/442", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "25d47637-1f03-4e5e-bd0c-557c4af3f5e2", "url": "https://t.me/cve0day/442"}, {"timestamp": "2026-08-28T00:00:37.117Z", "date_only": false, "value": "2026-08-28T00:00:37.117953Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cve0day/442", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "843b90b2-3219-4555-bcd8-e3f1ab41171e", "url": "https://t.me/cve0day/442", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-07T17:00:03.801Z", "date_only": false, "value": "2026-09-07T17:00:03.801181Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "c89ebf01-efdd-43b5-a2f5-8bf980c07a47"}, {"timestamp": "2026-09-08T00:00:38.248Z", "date_only": false, "value": "2026-09-08T00:00:38.248490Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "75577f25-b972-4399-bb6d-716a905ca52b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-09T01:19:32.446Z", "anchors": {"origin": {"timestamp": "2025-08-01T23:08:21.817Z", "date_only": false, "value": "2025-08-01T23:08:21.817Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-54136", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-08-01T23:08:21.817Z", "date_only": false, "value": "2025-08-01T23:08:21.817Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-54136", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-08-05T13:03:45Z", "date_only": false, "value": "2025-08-05T13:03:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/7284", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "625e78e2-3c05-49a9-aa11-b6fc09719944", "content": "\ud83d\udea8 A high-severity flaw in Cursor AI (CVE-2025-54136) let attackers hijack trusted MCP configs\u2014triggering remote code execution every time you opened the project.\n\nNo re-prompt. No warning. Just silent compromise by modifying a config file you already trusted.\n\nLearn more \u2192 https://thehackernews.com/2025/08/cursor-ai-code-editor-vulnerability.html", "url": "https://t.me/thehackernews/7284", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 309323.183, "hours": 85.9231063888889, "days": 3.5801294328703706, "min_seconds": 309323.183, "max_seconds": 309323.183, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-08-01T23:08:21.817Z", "date_only": false, "value": "2025-08-01T23:08:21.817Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-54136", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-08-05T13:03:45Z", "date_only": false, "value": "2025-08-05T13:03:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/7284", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "625e78e2-3c05-49a9-aa11-b6fc09719944", "content": "\ud83d\udea8 A high-severity flaw in Cursor AI (CVE-2025-54136) let attackers hijack trusted MCP configs\u2014triggering remote code execution every time you opened the project.\n\nNo re-prompt. No warning. Just silent compromise by modifying a config file you already trusted.\n\nLearn more \u2192 https://thehackernews.com/2025/08/cursor-ai-code-editor-vulnerability.html", "url": "https://t.me/thehackernews/7284", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 40097470.62953, "hours": 11138.186285980555, "days": 464.0910952491898, "min_seconds": 40097470.62953, "max_seconds": 40097470.62953, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-08-01T23:08:21.817Z", "date_only": false, "value": "2025-08-01T23:08:21.817Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-54136", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-09T01:19:32.446Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 39788147.44653, "hours": 11052.263179591666, "days": 460.5109658163194, "min_seconds": 39788147.44653, "max_seconds": 39788147.44653, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-08-05T13:03:45Z", "date_only": false, "value": "2025-08-05T13:03:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/7284", "record": "CVE-2025-54136", "field": "creation_timestamp", "uuid": "625e78e2-3c05-49a9-aa11-b6fc09719944", "content": "\ud83d\udea8 A high-severity flaw in Cursor AI (CVE-2025-54136) let attackers hijack trusted MCP configs\u2014triggering remote code execution every time you opened the project.\n\nNo re-prompt. No warning. Just silent compromise by modifying a config file you already trusted.\n\nLearn more \u2192 https://thehackernews.com/2025/08/cursor-ai-code-editor-vulnerability.html", "url": "https://t.me/thehackernews/7284", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-09T01:19:32.446Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}