Cursor Zero-Day Vulnerability: Persistent Risk Despite Full Disclosure

A zero-day vulnerability in Cursor allows arbitrary code execution via a malicious git.exe in project roots, with no user interaction required. The issue remains unaddressed despite multiple disclosures and six months of inaction from the vendor.

Comments

Read original article