An unpatched vulnerability in Cursor on Home windows may be triggered for code execution when a developer opens a repository within the utility, Mindgard stories.
Cursor is among the hottest AI-assisted improvement environments, with greater than 7 million lively customers.
The safety defect, Mindgard says, is easy: when opening a repository, Cursor would routinely execute a malicious git.exe binary within the mission’s root with out warning the consumer or asking for approval.
“The vulnerability shouldn’t be theoretical and doesn’t rely on a posh chain of exploitation, immediate injection, mannequin manipulation, jailbreaks, reminiscence corruption, or refined attacker tradecraft. Exploitation merely requires a developer to open a mission containing a git.exe binary within the repository on the root,” Mindgard says.
In accordance with Mindgard, the problem exists as a result of, when loading a mission, Cursor appears to be like for Git binaries in a number of places, together with the workspace itself.
“If an attacker planted a malicious git.exe within the repository root, Cursor will execute it routinely as a part of its path decision logic with out warning, approval, and even a sign that executable content material from the repository is about to run,” Mindgard explains.
Mindgard has disclosed the vulnerability publicly after reporting it to Cursor on December 15, 2025, and receiving no response relating to a possible patch for seven months.
The corporate says Cursor’s CISO invited Mindgard to its bug bounty program on HackerOne in January, the place the safety defect was resubmitted and confirmed as reproducible, nevertheless it has not acquired a response from Cursor.
“However coordinated disclosure solely works when there’s coordination. Seven months after preliminary disclosure, we have now no indication that customers are being protected, that remediation is underway, or that affected organizations have been knowledgeable. And at this level, withholding info now not serves customers; it serves silence,” Mindgard notes.
SecurityWeek has emailed Cursor for a press release on the matter and can replace this text if the corporate responds.
Associated: Home windows Bind Hyperlink Assaults Can Disguise Malware From EDR Instruments
Associated: Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow
Associated: Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption
Associated: NIST Opens Up to date IoT Safety Steerage to Public Overview
