Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution
Summary: Mindgard reported to Cursor on December 15, 2025 that opening a repository on Windows causes Cursor to run a file named git.exe from the project root, spawning it with the command line git rev-parse --show-toplevel, with no click or approval dialog and re-execution for as long as the project stays open. Mindgard's most recent dated confirmation is April 30, 2026 against Cursor 3.2.16, no patch or CVE exists, and The Hacker News found no entry covering the issue among Cursor's 33 published security advisories as of July 15.
What you should know: The precondition is just a cloned repository, which developers and their agents open all day, so the path runs from a repository anyone can publish to arbitrary code execution with the user's SSH keys and cloud tokens. Cymulate found the same pattern in GitHub Copilot CLI, Gemini CLI and the Codex desktop app, and as of its June 4 write-up none of those vendors had shipped a fix.
Read the original at The Hacker News ↗
- Topics
- AI Security
- Related
- SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8 Cyber Risks · Nov 15, 2026Pentagon Renames CDAO ‘Super Intelligence Office’ Cyber Risks · Nov 15, 2026186 Fake AI Domains Redirect Users to Click Fix Lures, Browser Malware, and Search Hijackers Cyber Risks · Nov 12, 2026