Cursor Exposed for Auto-Executing Git Vulnerability
WesEklund · x · 2026-07-15
A security firm recently disclosed a basic yet dangerous vulnerability in the Cursor AI coding assistant: when developers open a project repository, Cursor might automatically execute git.exe. If the repository contains malicious Git files, it could trigger execution.
The post adds that a standard IDE should only look for Git in system paths or developer-configured trusted paths, but Cursor's behavior violates this security principle. Worse, the issue remains unfixed and ignored for 7 months across 70+ version updates since it was reported in December last year.
Related event: Cursor AI Exposed for 0-Day Vulnerability(2 posts)→
More from coding & agent
- Gen games don't need to be realtime — turn-based interactivity works, devs argue — djcows · 2026-10-27
- How to ace the "send us something cool" AI interview: research interviewers with agents, then focus — brandon_galang · 2026-10-27
- Give AI a clean personal-data-free machine with full control: agents running 24/7 teach you more than any course — EXM7777 · 2026-10-27
- 20 papers across 6 areas to master production-grade agentic AI engineering — MaryamMiradi · 2026-10-27
- LangChain SF meetup to compare decision model Jev vs LLM judges for agent evals — LangChain · 2026-10-27
- How Clang recognizes your popcount loop and swaps it for a single CPU instruction — jimmykoppel · 2026-10-27