Severe Execution Vulnerability Exposed in Cursor
nptacek · x · 2026-07-17
A recent post highlights a severe, seven-month unpatched vulnerability in Cursor: simply browsing a project triggers the automatic execution of git.exe located in the project's root directory.
This means that if a project maintainer's account is compromised and they upload a malicious executable, anyone using Cursor to browse the repository could be compromised as well, creating a massive attack surface.
More from coding & agent
- 250 Builders Hack With Codex at Berlin Community Hackathon Ahead of OpenAI DevDay — paw_lean · 2026-10-26
- Ben Bajarin: Frontier AI is becoming the enterprise cyber-defense stack — BenBajarin · 2026-10-26
- Building AI bots on raw APIs? Devs say models are 'dumb without the harness' — madeofAjala · 2026-10-26
- HarnessMM cuts agent tokens per task by up to 88% while raising success rates — omarsar0 · 2026-10-26
- Microsoft demos intent-classifying agents built with Copilot App and Foundry, deployable across Teams and Outlook — marlene_zw · 2026-10-26
- Looking for a wearable mic with best battery life that feeds recordings to personal agents via MCP — altryne · 2026-10-26