An unpatched vulnerability in Cursor on Home windows may be triggered for code execution when a developer opens a repository within the software, Mindgard studies.
Cursor is without doubt one of the hottest AI-assisted growth environments, with greater than 7 million lively customers.
The safety defect, Mindgard says, is easy: when opening a repository, Cursor would robotically execute a malicious git.exe binary within the mission’s root with out warning the consumer or asking for approval.
“The vulnerability shouldn’t be theoretical and doesn’t rely on a fancy chain of exploitation, immediate injection, mannequin manipulation, jailbreaks, reminiscence corruption, or subtle attacker tradecraft. Exploitation merely requires a developer to open a mission containing a git.exe binary within the repository on the root,” Mindgard says.
In response to Mindgard, the problem exists as a result of, when loading a mission, Cursor appears to be like for Git binaries in a number of places, together with the workspace itself.
“If an attacker planted a malicious git.exe within the repository root, Cursor will execute it robotically as a part of its path decision logic with out warning, approval, and even a sign that executable content material from the repository is about to run,” Mindgard explains.
Mindgard has disclosed the vulnerability publicly after reporting it to Cursor on December 15, 2025, and receiving no response concerning a possible patch for seven months.
The corporate says Cursor’s CISO invited Mindgard to its bug bounty program on HackerOne in January, the place the safety defect was resubmitted and confirmed as reproducible, nevertheless it has not obtained a response from Cursor.
“However coordinated disclosure solely works when there may be coordination. Seven months after preliminary disclosure, we now have no indication that customers are being protected, that remediation is underway, or that affected organizations have been knowledgeable. And at this level, withholding data now not serves customers; it serves silence,” Mindgard notes.
SecurityWeek has emailed Cursor for an announcement on the matter and can replace this text if the corporate responds.
Associated: Home windows Bind Hyperlink Assaults Can Conceal Malware From EDR Instruments
Associated: Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow
Associated: Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption
Associated: NIST Opens Up to date IoT Safety Steering to Public Overview
