importantSYS.SOURCE: The Hacker News• 2026-07-15T16:25:22+05:30

Critical Vulnerability in Cursor Allows Arbitrary Code Execution via Malicious Git.exe

#vulnerability #code-execution #windows-security

A critical vulnerability in Cursor allows arbitrary code execution on Windows by exploiting a malicious 'git.exe' in cloned repositories, bypassing user interaction. No patch is available, with workarounds suggesting restricted execution environments and file monitoring.

Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning that anything in the folder is about to execute.

Whatever that binary does, it does as you, with your source, your SSH keys and your cloud tokens. Cursor keeps re-running it for as long as the project stays open.

No prompt

Read original article

*** END OF TRANSMISSION ***

> JIGA (YC W21) SEEKS TOP TALENT TO REVOLUTIONIZE MANUFACTURING PROCESSES > INDIAN AI CODING STARTUP EMERGENT ACHIEVES UNICORN STATUS WITH $130M SERIES C FUNDING > REALTA FUSION ESTABLISHES R&D FACILITY AT FORMER OSCAR MEYER PLANT FOR FUSION RESEARCH > VINT CERF LEADS INITIATIVE TO ESTABLISH AI AGENT IDENTIFICATION STANDARDS FOR OPEN INTERNET > CAPTCHAINBOX: IMPLEMENTING SENDER VERIFICATION TO COMBAT AI SPAM > SLEEP REGULARITY OUTPERFORMS SLEEP DURATION IN PREDICTING MORTALITY RISK > ANALYZING PUBLIC SENTIMENT SHIFTS AGAINST THE TECH INDUSTRY IN 2023 > THE CRITICAL ROLE OF COMMUNICATION IN MENTAL HEALTH PRIORITIZATION > ANALYZING A FOOTBALL PREDICTION MODEL'S ACCURACY ACROSS 10 WORLD CUPS > OPEN-SOURCE CLIMATE MONITORING TAMAGOTCHI PROJECT> JIGA (YC W21) SEEKS TOP TALENT TO REVOLUTIONIZE MANUFACTURING PROCESSES > INDIAN AI CODING STARTUP EMERGENT ACHIEVES UNICORN STATUS WITH $130M SERIES C FUNDING > REALTA FUSION ESTABLISHES R&D FACILITY AT FORMER OSCAR MEYER PLANT FOR FUSION RESEARCH > VINT CERF LEADS INITIATIVE TO ESTABLISH AI AGENT IDENTIFICATION STANDARDS FOR OPEN INTERNET > CAPTCHAINBOX: IMPLEMENTING SENDER VERIFICATION TO COMBAT AI SPAM > SLEEP REGULARITY OUTPERFORMS SLEEP DURATION IN PREDICTING MORTALITY RISK > ANALYZING PUBLIC SENTIMENT SHIFTS AGAINST THE TECH INDUSTRY IN 2023 > THE CRITICAL ROLE OF COMMUNICATION IN MENTAL HEALTH PRIORITIZATION > ANALYZING A FOOTBALL PREDICTION MODEL'S ACCURACY ACROSS 10 WORLD CUPS > OPEN-SOURCE CLIMATE MONITORING TAMAGOTCHI PROJECT