Cybersecurity · 66 views
Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution
Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning that anything in the folder is about to execute.
AI Summary
Cursor for Windows automatically executes any file named git.exe located in a repository’s root folder when the repository is opened. The execution occurs without user interaction, approval, or a warning dialog. The binary runs with the same permissions as the user, allowing it to access the user’s source code, SSH keys, and cloud tokens. This behavior enables malicious cloned repositories to trigger code execution on a user’s machine.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedMore from Cybersecurity
Continue reading recent Cybersecurity coverage
- OpenSSH flaw lets attackers access password-disabled accounts on some Linux systemsContinue reading
- FBI, CISA warn of cyberattacks targeting refrigeration systemsContinue reading
- French banking group hit by supply chain cyberattackContinue reading
- Binance heist is stark example of AI governance gaps and basic security failuresContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow