vulnerabilities developer-tools security-research software-engineering

Cursor 0day: When Full Disclosure Becomes the Only Protection Left

mindgard.ai

July 14, 2026

8 min read

🔥🔥🔥🔥🔥

66/100

Summary

Cursor IDE executes malicious git.exe files from the root of a project repository without user interaction or prompts. This vulnerability allows repeated execution of the planted malicious file, posing a significant security risk.

Key Takeaways

Cursor IDE automatically executes a malicious git.exe file located in the project root without user interaction, leading to arbitrary code execution.
The vulnerability was first reported on December 15, 2025, and remains unaddressed after over six months and 197 new versions.
Users are advised to open untrusted repositories only in isolated environments until the vulnerability is patched.
Cursor has not provided a meaningful response to the reported vulnerability despite multiple attempts by Mindgard to engage with them.

Read original article

View story →

Coverage & discussions

Hacker News · mindgard.ai

Cursor 0day: When Full Disclosure Becomes the Only Protection Left ↗

Community discussions

Hacker News discussion ↗

Historical count: 5 · 5 saved in sample · Historical sample

Analysis ready

Community Sentiment

Negative

Positives

The AI-assisted workflow is ambitious, aiming to streamline tasks like summarizing a repo and enhancing user productivity — but it raises valid concerns about security.
Some commenters appreciate the idea behind Cursor trying to automate git commands to enrich the user experience, even if the implementation is flawed.

Concerns

The lack of response from Cursor to reported vulnerabilities is alarming, suggesting a neglect of user safety and security that can't be ignored.
This exploit highlights a significant design flaw in Cursor, where it executes arbitrary code without proper user prompts — a glaring oversight in security practices.
Many users express skepticism over the decision to run executables without clear permissions, indicating a serious risk in trusting such tools with sensitive workflows.