Severe Execution Vulnerability Exposed in Cursor
nptacek · x · 2026-07-17
A recent post highlights a severe, seven-month unpatched vulnerability in Cursor: simply browsing a project triggers the automatic execution of git.exe located in the project's root directory.
This means that if a project maintainer's account is compromised and they upload a malicious executable, anyone using Cursor to browse the repository could be compromised as well, creating a massive attack surface.
More from coding & agent
- A roundup of AI agents and MCP resources, including how to evaluate agents — _jaydeepkarale · 2026-07-21
- A full course shows how to build and deploy an AI agent with OpenAI and LangChain — _jaydeepkarale · 2026-07-21
- A beginner guide to AI agents points readers to a Stanford webinar — _jaydeepkarale · 2026-07-21
- A practical guide on how to evaluate AI agents — _jaydeepkarale · 2026-07-21
- MCP is headed toward easier scale, event-driven extensions, and workable file uploads — EricBuess · 2026-07-21
- Developers debate the missing composition model for AI agents — threepointone · 2026-07-21