Cursor IDE Vulnerability: Automatic Execution of Malicious git.exe Binaries

Vulnerability Overview Vulnerability Name: Cursor Vulnerability Discovery Date: December 2025 Disclosure Date: July 13, 2026 Reporter: Mindgard Vulnerability Type: Malicious Binary Execution Vulnerability Description: This vulnerability allows attackers to plant a malicious file within a repository. When a developer opens a repository containing this malicious file, the Cursor client automatically executes it. Impact Scope Affected Software: Cursor (a popular AI-powered coding platform) Affected Users: All developers using Cursor, particularly those who work with repositories containing malicious files. Potential Risks: Attackers can execute arbitrary code within the developer's environment, potentially leading to severe consequences such as data breaches and system compromise. Remediation Current Status: As of July 13, 2026, Cursor has not yet patched this vulnerability. Recommended Actions: - Enterprise Users: Use AppLocker or Windows App Control policies to prevent from executing in development workspace directories. - Individual Users: Avoid relying on file hash blacklists, as this method is easily bypassed. - Interim Measures: Before the IDE patch is released, it is recommended to use untrusted repositories in isolated virtual machines, Windows Sandbox, or other disposable environments. Related Resources Mindgard Blog Post: Link Dark Reading Contacting Cursor: Dark Reading has reached out to Cursor for comment, but no response has been received yet. Author Information Author: Alexander Culafi Title: Senior Staff Writer, Dark Reading Bio: Alex is an award-winning writer, journalist, and podcast host based in Boston. He began his career writing for independent game publications as a teenager and is an alumnus of Emerson College. Additional Related Information Related Vulnerabilities: - AI Coding: Do Security Risks Outweigh Productivity Gains? - Dialogflow CX “Rogue Agent” Vulnerability Exposes AI Chatbot Data - Crafty Phishing Campaign Adapts to User Devices and Operating Systems Summary This is a critical security vulnerability that allows attackers to execute malicious code within a developer's environment. Although Mindgard has discovered and reported this issue, Cursor has not yet implemented a fix. Users are advised to adopt interim mitigation measures to reduce risks and monitor for official patch releases.

Goal Reached Thanks to every supporter — we hit 100%!

Cursor IDE Vulnerability: Automatic Execution of Malicious git.exe Binaries

More from this source