importantSYS.SOURCE: The Hacker News• 2026-07-15T16:25:22+05:30

Critical Vulnerability in Cursor Allows Arbitrary Code Execution via Malicious Git.exe

#vulnerability #code-execution #windows-security

A critical vulnerability in Cursor allows arbitrary code execution on Windows by exploiting a malicious 'git.exe' in cloned repositories, bypassing user interaction. No patch is available, with workarounds suggesting restricted execution environments and file monitoring.

Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning that anything in the folder is about to execute.

Whatever that binary does, it does as you, with your source, your SSH keys and your cloud tokens. Cursor keeps re-running it for as long as the project stays open.

No prompt

Read original article

*** END OF TRANSMISSION ***

> OPTIMIZING LLM OUTPUT EFFICIENCY THROUGH HISTORICAL TELEGRAPHESE COMPRESSION TECHNIQUES > CISO INSIGHTS REVEAL CYBER RISK SHIFTS TOWARD INTERNAL WORKFLOWS > FBI WARNS OF ONGOING FORTIBLEED CAMPAIGN TARGETING FORTINET DEVICES WITH 86,644 CREDENTIALS COMPROMISED > CRITICAL ATLASSIAN DATA CENTER VULNERABILITY CVE-2026-21589 EXPLOITED WITHIN TWO HOURS OF DISCLOSURE > AGENTIC PENTESTING: PROOFS, LIMITATIONS, AND CONTINUOUS VALIDATION CHALLENGES > CHROME INTEGRATES JPEG XL FOR ENHANCED IMAGE COMPRESSION > EXPLOITING LARGE LANGUAGE MODELS AND DATA POISONING TO MANIPULATE CONSENSUS > ADVANCEMENTS IN SYNTHETIC BIOLOGY ENABLE CREATION OF MIRROR-LIFE ORGANISMS > CANADIAN STUDY WARNS PERMANENT DAYLIGHT SAVING TIME POSES RISKS TO SLEEP AND MENTAL HEALTH > RISING PS5 JAILBREAKS POSE SIGNIFICANT SECURITY CHALLENGES> OPTIMIZING LLM OUTPUT EFFICIENCY THROUGH HISTORICAL TELEGRAPHESE COMPRESSION TECHNIQUES > CISO INSIGHTS REVEAL CYBER RISK SHIFTS TOWARD INTERNAL WORKFLOWS > FBI WARNS OF ONGOING FORTIBLEED CAMPAIGN TARGETING FORTINET DEVICES WITH 86,644 CREDENTIALS COMPROMISED > CRITICAL ATLASSIAN DATA CENTER VULNERABILITY CVE-2026-21589 EXPLOITED WITHIN TWO HOURS OF DISCLOSURE > AGENTIC PENTESTING: PROOFS, LIMITATIONS, AND CONTINUOUS VALIDATION CHALLENGES > CHROME INTEGRATES JPEG XL FOR ENHANCED IMAGE COMPRESSION > EXPLOITING LARGE LANGUAGE MODELS AND DATA POISONING TO MANIPULATE CONSENSUS > ADVANCEMENTS IN SYNTHETIC BIOLOGY ENABLE CREATION OF MIRROR-LIFE ORGANISMS > CANADIAN STUDY WARNS PERMANENT DAYLIGHT SAVING TIME POSES RISKS TO SLEEP AND MENTAL HEALTH > RISING PS5 JAILBREAKS POSE SIGNIFICANT SECURITY CHALLENGES