Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-15 10:55 UTC
  • Importiert: 2026-07-21 14:00 UTC
  • Quelle-ID: thn_global
  • uid_hash: 78c5f647fe862c51d6e8e3555072188ebe57c2b12fe80431272f1521f9b3c4ed

Inhalt

Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning that anything in the folder is about to execute.

Whatever that binary does, it does as you, with your source, your SSH keys and your cloud tokens. Cursor keeps re-running it for as long as the project stays open.

No prompt

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews