Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code… | HappeningNow.news

Cybersecurity · 45 views

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning that anything in the folder is about to execute.

Source Summary Published July 15, 2026 Brief Under 1 min brief
Story intelligence
Coverage Single outlet Single-outlet story
Views 45 Community interest
Brief read Under 1 min brief 56 words

Summary

Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning that anything in the folder is about to execute. Whatever that binary does, it does as you, with your source, your SSH keys and your cloud tokens.

Read original at The Hackernews

More from Cybersecurity

Continue reading recent Cybersecurity coverage

Support HappeningNow

Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.

Support HappeningNow

Report an issue with this page