Cursor, a popular AI-assisted development environment with over 7 million users, has a vulnerability on Windows where it automatically executes a git.exe binary found in the root of a project repository when the project is opened. This behavior occurs without any warning or user consent. The vulnerability was reported to Cursor in December 2025 by Mindgard, who found that exploitation requires only opening a malicious repository containing a crafted git.exe. Despite confirmation of the issue via Cursor's bug bounty program, no patch or official fix has been released, and users remain unprotected. The vulnerability does not rely on complex exploitation techniques but on Cursor's path resolution logic that includes executing binaries found in the workspace itself.

An attacker who can supply a malicious repository with a git.exe binary in its root can achieve arbitrary code execution on a developer's machine running Cursor on Windows simply by having the developer open the repository. This could lead to compromise of the developer's environment, potentially enabling further attacks such as malware installation or credential theft. The vulnerability affects all users opening such malicious repositories, posing a significant risk to development environments.

As of the latest information, no official patch or remediation has been provided by Cursor. Users should avoid opening untrusted or suspicious repositories in Cursor on Windows until a fix is released. Monitor Cursor's official channels for updates. Since the vendor has not responded with a fix or mitigation, users must exercise caution and consider alternative development environments or manual verification of repository contents before opening them in Cursor.